What’s Vulnerable › Vulnerabilities

CVE-2017-1000417

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-22 · updated 2026-06-17
• Weakness: CWE-295

Description

MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g. in ExtKeyUsage extension) on X.509 certificates.

Affected products

• Inside Secure MatrixSSL: 3.7.2

References

• https://github.com/matrixssl/matrixssl/blob/master/doc/CHANGES.md
• https://www.ieee-security.org/TC/SP2017/papers/231.pdf
• https://www.youtube.com/watch?v=FW--c_F_cY8
• https://github.com/matrixssl/matrixssl/blob/master/doc/CHANGES.md
• https://www.ieee-security.org/TC/SP2017/papers/231.pdf
• https://www.youtube.com/watch?v=FW--c_F_cY8

Get alerted when CVE-2017-1000417 or the next vulnerability affects your stack