CVE-2019-10914: Buffer Overflow
Published Apr 8, 2019
·Updated
pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.
Affected Software
1 affected component
MatrixSSL MatrixSSL<=4.0.2
Remediation
Patch Available
Event History
Apr 8, 2019
CVE Published
via MITRE·01:31 PM
Data Sourced
via MITRE·01:31 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-10914?
CVE-2019-10914 has a high severity rating due to the potential for a stack-based buffer overflow during X.509 certificate verification.
2
How do I fix CVE-2019-10914?
To fix CVE-2019-10914, upgrade to MatrixSSL version 4.0.2 or later.
3
What causes CVE-2019-10914?
CVE-2019-10914 is caused by missing validation in the psRsaDecryptPubExt function within the MatrixSSL library.
4
Which software is affected by CVE-2019-10914?
CVE-2019-10914 affects MatrixSSL versions up to and including 4.0.1.
5
Can CVE-2019-10914 lead to remote code execution?
Yes, exploiting CVE-2019-10914 may lead to remote code execution due to the buffer overflow vulnerability.