Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-15896HistoryDec 11, 2017 - 9:29 p.m.
CVE-2017-15896
2017-12-1121:29:00
Debian Security Bug Tracker
security-tracker.debian.org
35
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.946
Percentile
99.3%
Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | nodejs | < 18.19.0+dfsg-6~deb12u2 | nodejs_18.19.0+dfsg-6~deb12u2_all.deb |
| Debian | 11 | all | nodejs | < 12.22.12~dfsg-1~deb11u4 | nodejs_12.22.12~dfsg-1~deb11u4_all.deb |
| Debian | 999 | all | nodejs | < 20.17.0+dfsg-2 | nodejs_20.17.0+dfsg-2_all.deb |
| Debian | 13 | all | nodejs | < 20.17.0+dfsg-2 | nodejs_20.17.0+dfsg-2_all.deb |
Related
f5
f5
K18364001 : Node.js vulnerability CVE-2017-15896
2018-05-09 00:00:00
K43452233 : OpenSSL vulnerability CVE-2017-3737
2018-01-26 00:00:00
osv
osv
CVE-2017-15896
2017-12-11 21:29:00
CVE-2017-3737
2017-12-07 16:29:00
openssl1.0 - security update
2017-12-17 00:00:00
ubuntucve
ubuntucve
CVE-2017-15896
2017-12-11 00:00:00
CVE-2017-3737
2017-12-07 00:00:00
prion
prion
Design/Logic Flaw
2017-12-11 21:29:00
Design/Logic Flaw
2017-12-07 16:29:00
redhatcve
redhatcve
CVE-2017-15896
2017-12-12 16:20:11
CVE-2017-3737
2017-12-08 07:49:46
cve
cve
CVE-2017-15896
2017-12-11 21:29:00
CVE-2017-3737
2017-12-07 16:29:00
alpinelinux
alpinelinux
CVE-2017-15896
2017-12-11 21:29:00
CVE-2017-3737
2017-12-07 16:29:00
cvelist
cvelist
CVE-2017-15896
2017-12-11 21:00:00
CVE-2017-3737
2017-12-07 16:00:00
nvd
nvd
CVE-2017-15896
2017-12-11 21:29:00
CVE-2017-3737
2017-12-07 16:29:00
nodejsblog
nodejsblog
Data Confidentiality/Integrity Vulnerability, December 2017
2017-12-08 00:00:00
nessus
nessus
FreeBSD : node.js -- Data Confidentiality/Integrity Vulnerability, December 2017 (bea84a7a-e0c9-11e7-b4f3-11baa0c2df21)
2017-12-15 00:00:00
openSUSE Security Update : nodejs4 (openSUSE-2018-5)
2018-01-08 00:00:00
openSUSE Security Update : nodejs6 (openSUSE-2018-116)
2018-02-01 00:00:00
freebsd
freebsd
node.js -- Data Confidentiality/Integrity Vulnerability, December 2017
2017-12-08 00:00:00
OpenSSL -- multiple vulnerabilities
2017-12-07 00:00:00
FreeBSD -- OpenSSL multiple vulnerabilities
2017-12-09 00:00:00
veracode
veracode
Authentication Bypass
2017-12-14 05:07:09
Denial Of Service (DoS) Through Error State
2018-04-23 07:59:53
altlinux
altlinux
Security fix for the ALT Linux 10 package node version 6.13.0-alt1
2018-02-27 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2n-alt1
2017-12-07 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2n-alt1
2017-12-07 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:0002-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0293-1)
2021-06-09 00:00:00
OpenSSL Security Bypass Vulnerability (Dec 2017) - Windows
2017-12-08 00:00:00
debiancve
debiancve
CVE-2017-3737
2017-12-07 16:29:00
openssl
openssl
Vulnerability in OpenSSL - Read/write after SSL object in error state
2017-12-07 00:00:00
ibm
ibm
Security Bulletin: z/TPF is affected by the OpenSSL error state security vulnerability
2018-08-03 04:23:43
Security Bulletin: Vulnerability in the Fabric OS used by IBM b-type SAN directors and switches.
2020-01-08 17:48:45
Security Bulletin: Vulnerability in OpenSSL affects AIX (CVE-2017-3737)
2021-09-15 12:14:52
ics
ics
Siemens OpenSSL Vulnerability in Industrial Products (Update E)
2019-04-09 12:00:00
seebug
seebug
aix
aix
Vulnerability in OpenSSL affects AIX (CVE-2017-3737)
2018-01-29 10:36:55
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-0010-A
2018-01-06 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2018-1.0-0097-A
2018-01-06 00:00:00
Moderate Photon OS Security Update - PHSA-2018-0097
2018-01-06 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2017-12-11 00:00:00
slackware
slackware
[slackware-security] openssl
2017-12-09 03:52:34
debian
debian
[SECURITY] [DSA 4065-1] openssl1.0 security update
2017-12-17 13:59:51
symantec
symantec
SA159: OpenSSL Vulnerabilities 7-Dec-2017
2018-01-16 08:00:00
oraclelinux
oraclelinux
openssl security update
2018-04-18 00:00:00
openssl security and bug fix update
2018-04-16 00:00:00
openssl security update
2019-03-13 00:00:00
redhat
redhat
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:12.openssl
2017-12-09 00:00:00
centos
centos
openssl security update
2018-04-26 17:48:29
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2017-12-14 00:00:00
archlinux
archlinux
[ASA-201712-11] lib32-openssl-1.0: multiple issues
2017-12-17 00:00:00
suse
suse
Security update for openssl (important)
2017-12-16 06:08:45
Security update for openssl (important)
2017-12-16 15:07:17
Security update for virtualbox (important)
2018-04-24 03:20:04
mageia
mageia
Updated openssl packages fix security vulnerabilities
2017-12-17 02:20:04
amazon
amazon
Medium: openssl
2018-05-10 17:29:00
Medium: openssl
2018-04-26 17:38:00
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.946
Percentile
99.3%
Related for DEBIANCVE:CVE-2017-15896