CVE-2017-1000416

axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050.

• CWE-193

• https://www.ieee-security.org/TC/SP2017/papers/231.pdfTechnical Description, Third Party Advisory
• https://www.youtube.com/watch?v=FW--c_F_cY8Third Party Advisory
• https://www.ieee-security.org/TC/SP2017/papers/231.pdfTechnical Description, Third Party Advisory
• https://www.youtube.com/watch?v=FW--c_F_cY8Third Party Advisory

Published

Jan 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000410The Linux kernel version 3.3-rc1 and later is affected by a …
• CVE-2017-1000411OpenFlow Plugin and OpenDayLight Controller versions Nitroge…
• CVE-2017-1000412Linaro's open source TEE solution called OP-TEE, version 2.4…
• CVE-2017-1000413Linaro's open source TEE solution called OP-TEE, version 2.4…
• CVE-2017-1000414ImpulseAdventure JPEGsnoop version 1.7.5 is vulnerable to a …
• CVE-2017-1000415MatrixSSL version 3.7.2 has an incorrect UTCTime date range …
• CVE-2017-1000417MatrixSSL version 3.7.2 adopts a collision-prone OID compari…
• CVE-2017-1000418The WildMidi_Open function in WildMIDI since commit d8a46682…
• CVE-2017-1000419phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avat…
• CVE-2017-1000420Syncthing version 0.14.33 and older is vulnerable to symlink…
• CVE-2017-1000421Gifsicle gifview 1.89 and older is vulnerable to a use-after…
• CVE-2017-1000422Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several i…