Lucene search

[email protected]CVE-2017-3735

HistoryAug 28, 2017 - 7:29 p.m.

CVE-2017-3735

2017-08-2819:29:01

CWE-119

[email protected]

web.nvd.nist.gov

397

cve

2017

3735

ipaddressfamily

x.509 certificate

openssl

security vulnerability

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.1 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

Affected configurations

NVD

Node

opensslopensslMatch0.9.7j

opensslopensslMatch0.9.7k

opensslopensslMatch0.9.7l

opensslopensslMatch0.9.7m

opensslopensslMatch0.9.8

opensslopensslMatch0.9.8a

opensslopensslMatch0.9.8b

opensslopensslMatch0.9.8c

opensslopensslMatch0.9.8d

opensslopensslMatch0.9.8e

opensslopensslMatch0.9.8f

opensslopensslMatch0.9.8g

opensslopensslMatch0.9.8h

opensslopensslMatch0.9.8i

opensslopensslMatch0.9.8j

opensslopensslMatch0.9.8k

opensslopensslMatch0.9.8l

opensslopensslMatch0.9.8m

opensslopensslMatch0.9.8mbeta1

opensslopensslMatch0.9.8n

opensslopensslMatch0.9.8o

opensslopensslMatch0.9.8p

opensslopensslMatch0.9.8q

opensslopensslMatch0.9.8r

opensslopensslMatch0.9.8s

opensslopensslMatch0.9.8t

opensslopensslMatch0.9.8u

opensslopensslMatch0.9.8v

opensslopensslMatch0.9.8w

opensslopensslMatch0.9.8x

opensslopensslMatch0.9.8y

opensslopensslMatch0.9.8z

opensslopensslMatch0.9.8za

opensslopensslMatch0.9.8zb

opensslopensslMatch0.9.8zc

opensslopensslMatch0.9.8ze

opensslopensslMatch0.9.8zg

opensslopensslMatch1.0.0

opensslopensslMatch1.0.0beta1

opensslopensslMatch1.0.0beta2

opensslopensslMatch1.0.0beta3

opensslopensslMatch1.0.0beta4

opensslopensslMatch1.0.0beta5

opensslopensslMatch1.0.0a

opensslopensslMatch1.0.0b

opensslopensslMatch1.0.0c

opensslopensslMatch1.0.0d

opensslopensslMatch1.0.0e

opensslopensslMatch1.0.0f

opensslopensslMatch1.0.0g

opensslopensslMatch1.0.0h

opensslopensslMatch1.0.0i

opensslopensslMatch1.0.0j

opensslopensslMatch1.0.0k

opensslopensslMatch1.0.0l

opensslopensslMatch1.0.0m

opensslopensslMatch1.0.0n

opensslopensslMatch1.0.0o

opensslopensslMatch1.0.0p

opensslopensslMatch1.0.0q

opensslopensslMatch1.0.0r

opensslopensslMatch1.0.0s

opensslopensslMatch1.0.1

opensslopensslMatch1.0.1beta1

opensslopensslMatch1.0.1beta2

opensslopensslMatch1.0.1beta3

opensslopensslMatch1.0.1a

opensslopensslMatch1.0.1b

opensslopensslMatch1.0.1c

opensslopensslMatch1.0.1d

opensslopensslMatch1.0.1e

opensslopensslMatch1.0.1f

opensslopensslMatch1.0.1g

opensslopensslMatch1.0.1h

opensslopensslMatch1.0.1i

opensslopensslMatch1.0.1j

opensslopensslMatch1.0.1k

opensslopensslMatch1.0.1l

opensslopensslMatch1.0.2

opensslopensslMatch1.0.2beta1

opensslopensslMatch1.0.2beta2

opensslopensslMatch1.0.2beta3

opensslopensslMatch1.0.2a

opensslopensslMatch1.0.2b

opensslopensslMatch1.0.2c

opensslopensslMatch1.0.2d

opensslopensslMatch1.0.2e

opensslopensslMatch1.0.2f

opensslopensslMatch1.0.2h

opensslopensslMatch1.0.2i

opensslopensslMatch1.0.2j

opensslopensslMatch1.0.2k

opensslopensslMatch1.0.2l

opensslopensslMatch1.1.0

opensslopensslMatch1.1.0a

opensslopensslMatch1.1.0b

opensslopensslMatch1.1.0c

opensslopensslMatch1.1.0d

opensslopensslMatch1.1.0e

opensslopensslMatch1.1.0f

Node

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

CPENameOperatorVersion
openssl:opensslopenssleq0.9.7j
openssl:opensslopenssleq0.9.7k
openssl:opensslopenssleq0.9.7l
openssl:opensslopenssleq0.9.7m
openssl:opensslopenssleq0.9.8
openssl:opensslopenssleq0.9.8a
openssl:opensslopenssleq0.9.8b
openssl:opensslopenssleq0.9.8c
openssl:opensslopenssleq0.9.8d
openssl:opensslopenssleq0.9.8e

CPE	Name	Operator	Version
openssl:openssl	openssl	eq	0.9.7j
openssl:openssl	openssl	eq	0.9.7k
openssl:openssl	openssl	eq	0.9.7l
openssl:openssl	openssl	eq	0.9.7m
openssl:openssl	openssl	eq	0.9.8
openssl:openssl	openssl	eq	0.9.8a
openssl:openssl	openssl	eq	0.9.8b
openssl:openssl	openssl	eq	0.9.8c
openssl:openssl	openssl	eq	0.9.8d
openssl:openssl	openssl	eq	0.9.8e

Rows per page:

1-10 of 881

CNA Affected

[
  {
    "vendor": "OpenSSL Software Foundation",
    "product": "OpenSSL",
    "versions": [
      {
        "version": "1.1.0",
        "status": "affected"
      },
      {
        "version": "1.0.2",
        "status": "affected"
      }
    ]
  }
]