CVE-2016-6882: Matrixssl

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.

Affected products

• Matrixssl Matrixssl: up to and including 3.8.6

Published 2017-03-03. Last modified 2026-06-17.