What’s Vulnerable › Vulnerabilities

CVE-2017-1000416

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-22 · updated 2026-06-17
• Weakness: CWE-193

Description

axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050.

Affected products

• Axtls Project Axtls: 1.5.3

References

• https://www.ieee-security.org/TC/SP2017/papers/231.pdf
• https://www.youtube.com/watch?v=FW--c_F_cY8
• https://www.ieee-security.org/TC/SP2017/papers/231.pdf
• https://www.youtube.com/watch?v=FW--c_F_cY8

Get alerted when CVE-2017-1000416 or the next vulnerability affects your stack