TLS Padding Oracle in MatrixSSL - CVE-2016-6883

Vulnerability details

The vulnerability allows a remote attacker to decrypt TLS traffic.

The vulnerability exists due to an error in TLS implementation. A remote attacker with ability to establish a large number of TLS connections with the target server can conduct an adaptive-chosen ciphertext attack against RSA cipher and gain access to sensitive information.

The attack is known as "ROBOT" (Return Of Bleichenbacher's Oracle Threat).

Affected software

How to mitigate CVE-2016-6883

External References

• http://www.openwall.com/lists/oss-security/2016/08/19/8
• https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md

Related Security Bulletins

• TLS Padding Oracle in MatrixSSL