PatchTheCVEmatrixssl vulnerabilities and fixes
Recent CVEs affecting matrixssl, with upgrade or downgrade steps. 3 tracked.
matrixssl has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-12-22. Highest priority: CVE-2022-43974 (score 53/100).
- CVE-2023-24609 HIGH 7.5 UPGRADE MITIGATE Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hell
- CVE-2022-46505 HIGH 7.5 UPGRADE An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting
- CVE-2022-43974 HIGH 8.1 UPGRADE MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13
FAQ
How do I fix matrixssl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is matrixssl being exploited right now?
None of the tracked matrixssl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which matrixssl CVE should I patch first?
CVE-2022-43974 currently ranks highest (53/100): MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13.