ByteOS Network

Vulnerability Details :

CVE-2017-3735

Assigner Org ID-3a12439a-ef3a-4c79-92e6-6081a721f1e5

Published At-28 Aug, 2017 | 19:00

Updated At-16 Sep, 2024 | 21:08

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:openssl

Assigner Org ID:3a12439a-ef3a-4c79-92e6-6081a721f1e5

Published At:28 Aug, 2017 | 19:00

Updated At:16 Sep, 2024 | 21:08

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

Hyperlink	Resource
http://www.securitytracker.com/id/1039726	vdb-entry
https://usn.ubuntu.com/3611-2/	vendor-advisory
https://www.debian.org/security/2017/dsa-4018	vendor-advisory
https://security.gentoo.org/glsa/201712-03	vendor-advisory
https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html	mailing-list
https://access.redhat.com/errata/RHSA-2018:3505	vendor-advisory
https://www.debian.org/security/2017/dsa-4017	vendor-advisory
https://access.redhat.com/errata/RHSA-2018:3221	vendor-advisory
http://www.securityfocus.com/bid/100515	vdb-entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc	vendor-advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	N/A
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	N/A
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	N/A
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	N/A
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html	N/A
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	N/A
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	N/A
https://www.oracle.com//security-alerts/cpujul2021.html	N/A
https://security.netapp.com/advisory/ntap-20171107-0002/	N/A
https://support.apple.com/HT208331	N/A
https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822	N/A
https://security.netapp.com/advisory/ntap-20170927-0001/	N/A
https://www.tenable.com/security/tns-2017-15	N/A
https://www.openssl.org/news/secadv/20171102.txt	N/A
https://www.tenable.com/security/tns-2017-14	N/A
https://www.openssl.org/news/secadv/20170828.txt	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	N/A

Hyperlink	Resource
http://www.securitytracker.com/id/1039726	vdb-entry x_transferred
https://usn.ubuntu.com/3611-2/	vendor-advisory x_transferred
https://www.debian.org/security/2017/dsa-4018	vendor-advisory x_transferred
https://security.gentoo.org/glsa/201712-03	vendor-advisory x_transferred
https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html	mailing-list x_transferred
https://access.redhat.com/errata/RHSA-2018:3505	vendor-advisory x_transferred
https://www.debian.org/security/2017/dsa-4017	vendor-advisory x_transferred
https://access.redhat.com/errata/RHSA-2018:3221	vendor-advisory x_transferred
http://www.securityfocus.com/bid/100515	vdb-entry x_transferred
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc	vendor-advisory x_transferred
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_transferred
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	x_transferred
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	x_transferred
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html	x_transferred
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	x_transferred
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	x_transferred
https://www.oracle.com//security-alerts/cpujul2021.html	x_transferred
https://security.netapp.com/advisory/ntap-20171107-0002/	x_transferred
https://support.apple.com/HT208331	x_transferred
https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822	x_transferred
https://security.netapp.com/advisory/ntap-20170927-0001/	x_transferred
https://www.tenable.com/security/tns-2017-15	x_transferred
https://www.openssl.org/news/secadv/20171102.txt	x_transferred
https://www.tenable.com/security/tns-2017-14	x_transferred
https://www.openssl.org/news/secadv/20170828.txt	x_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	x_transferred

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Hyperlink	Source	Resource
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	openssl-security@openssl.org	N/A
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	openssl-security@openssl.org	N/A
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	openssl-security@openssl.org	N/A
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	openssl-security@openssl.org	N/A
http://www.securityfocus.com/bid/100515	openssl-security@openssl.org	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039726	openssl-security@openssl.org	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3221	openssl-security@openssl.org	N/A
https://access.redhat.com/errata/RHSA-2018:3505	openssl-security@openssl.org	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	openssl-security@openssl.org	N/A
https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822	openssl-security@openssl.org	N/A
https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html	openssl-security@openssl.org	N/A
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc	openssl-security@openssl.org	N/A
https://security.gentoo.org/glsa/201712-03	openssl-security@openssl.org	N/A
https://security.netapp.com/advisory/ntap-20170927-0001/	openssl-security@openssl.org	Issue Tracking Third Party Advisory
https://security.netapp.com/advisory/ntap-20171107-0002/	openssl-security@openssl.org	Issue Tracking Third Party Advisory
https://support.apple.com/HT208331	openssl-security@openssl.org	N/A
https://usn.ubuntu.com/3611-2/	openssl-security@openssl.org	N/A
https://www.debian.org/security/2017/dsa-4017	openssl-security@openssl.org	Third Party Advisory
https://www.debian.org/security/2017/dsa-4018	openssl-security@openssl.org	Third Party Advisory
https://www.openssl.org/news/secadv/20170828.txt	openssl-security@openssl.org	Patch Vendor Advisory
https://www.openssl.org/news/secadv/20171102.txt	openssl-security@openssl.org	Issue Tracking Vendor Advisory
https://www.oracle.com//security-alerts/cpujul2021.html	openssl-security@openssl.org	N/A
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	openssl-security@openssl.org	N/A
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html	openssl-security@openssl.org	N/A
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	openssl-security@openssl.org	N/A
https://www.tenable.com/security/tns-2017-14	openssl-security@openssl.org	Issue Tracking Third Party Advisory
https://www.tenable.com/security/tns-2017-15	openssl-security@openssl.org	N/A
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/100515	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039726	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3221	af854a3a-2127-422b-91ae-364da2661108	N/A
https://access.redhat.com/errata/RHSA-2018:3505	af854a3a-2127-422b-91ae-364da2661108	N/A
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	af854a3a-2127-422b-91ae-364da2661108	N/A
https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822	af854a3a-2127-422b-91ae-364da2661108	N/A
https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.gentoo.org/glsa/201712-03	af854a3a-2127-422b-91ae-364da2661108	N/A
https://security.netapp.com/advisory/ntap-20170927-0001/	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://security.netapp.com/advisory/ntap-20171107-0002/	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://support.apple.com/HT208331	af854a3a-2127-422b-91ae-364da2661108	N/A
https://usn.ubuntu.com/3611-2/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.debian.org/security/2017/dsa-4017	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.debian.org/security/2017/dsa-4018	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://www.openssl.org/news/secadv/20170828.txt	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://www.openssl.org/news/secadv/20171102.txt	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Vendor Advisory
https://www.oracle.com//security-alerts/cpujul2021.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.tenable.com/security/tns-2017-14	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://www.tenable.com/security/tns-2017-15	af854a3a-2127-422b-91ae-364da2661108	N/A

CVE-2017-3735

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs