Skip to content
Noroxi

axtls project records

8 published records for vendor axtls project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

8 records
  • CVE-2019-8981
    40Plan

    tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value

    CriticalCVSS 9.8No exploitEPSS 2%

    axtls project · axtlsMar 25, 2019

  • CVE-2019-10013
    31Monitor

    The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cau

    HighCVSS 7.5No exploitEPSS 1%

    axtls project · axtlsDec 3, 2019

  • CVE-2019-9689
    30Monitor

    process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake mes

    HighCVSS 7.5No exploitEPSS 1%

    axtls project · axtlsDec 3, 2019

  • CVE-2018-16149
    23Monitor

    In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification blindly trusts the declared lengths in t

    MediumCVSS 5.9No exploitEPSS 0%

    axtls project · axtlsNov 7, 2018

  • CVE-2018-16253
    23Monitor

    In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metad

    MediumCVSS 5.9No exploitEPSS 0%

    axtls project · axtlsNov 7, 2018

  • CVE-2018-16150
    23Monitor

    In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the ha

    MediumCVSS 5.9No exploitEPSS 0%

    axtls project · axtlsNov 7, 2018

  • CVE-2023-33613
    22Monitor

    axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c.

    MediumCVSS 5.5No exploitEPSS 0%

    axtls project · axtlsJun 6, 2023

  • CVE-2017-1000416
    21Monitor

    axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050.

    MediumCVSS 5.3No exploitEPSS 0%

    axtls project · axtlsJan 22, 2018