Lucene search
F5F5:K55462146HistoryFeb 23, 2017 - 12:00 a.m.
K55462146 : OpenSSL vulnerability CVE-2017-3733
2017-02-2300:00:00
my.f5.com
25
Security Advisory Description
During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected. (CVE-2017-3733)
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
openvas
openvas
OpenSSL Encrypt-Then-Mac Extension Denial of Service Vulnerability - Linux
2017-02-21 00:00:00
OpenSSL Encrypt-Then-Mac Extension Denial of Service Vulnerability - Windows
2017-02-21 00:00:00
Oracle VirtualBox Security Updates (oct2017-3236626) 01 - Mac OS X
2017-10-18 00:00:00
cvelist
cvelist
CVE-2017-3733 Encrypt-Then-Mac renegotiation crash
2017-02-16 00:00:00
ubuntucve
ubuntucve
CVE-2017-3733
2017-05-04 00:00:00
ibm
ibm
prion
prion
Design/Logic Flaw
2017-05-04 19:29:00
nessus
nessus
OpenSSL 1.1.0 < 1.1.0e Vulnerability
2017-02-23 00:00:00
Oracle VM VirtualBox 5.1.x < 5.1.30 (October 2017 CPU)
2017-10-18 00:00:00
cve
cve
CVE-2017-3733
2017-05-04 19:29:00
openssl
openssl
Vulnerability in OpenSSL CVE-2017-3733
2017-02-16 00:00:00
nvd
nvd
CVE-2017-3733
2017-05-04 19:29:00
freebsd
freebsd
openssl -- crash on handshake
2017-02-16 00:00:00
redhatcve
redhatcve
CVE-2017-3733
2020-03-15 13:36:03
checkpoint_advisories
checkpoint_advisories
OpenSSL Encrypt-Then-Mac Renegotiation Denial of Service (CVE-2017-3733)
2017-03-22 00:00:00
debiancve
debiancve
CVE-2017-3733
2017-05-04 19:29:00
osv
osv
CVE-2017-3733
2017-05-04 19:29:00
myhack58
myhack58
threatpost
threatpost
OpenSSL Update Fixes High Severity DoS Vulnerability
2017-02-21 16:02:20
cisco
cisco
kitploit
kitploit
mageia
mageia
Updated virtualbox packages fix security vulnerabilities
2017-10-27 10:16:04
oracle
oracle
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00