Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201712-03
HistoryDec 14, 2017 - 12:00 a.m.

OpenSSL: Multiple vulnerabilities

2017-12-1400:00:00
Gentoo Foundation
security.gentoo.org
34

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.946

Percentile

99.2%

JSON

Background

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Description

Multiple vulnerabilities have been discovered in OpenSSL. Please review the referenced CVE identifiers for details.

Impact

A remote attacker could cause a Denial of Service condition, recover a private key in unlikely circumstances, circumvent security restrictions to perform unauthorized actions, or gain access to sensitive information.

Workaround

There are no known workarounds at this time.

Resolution

All OpenSSL users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-libs/openssl-1.0.2n"
OSVersionArchitecturePackageVersionFilename
Gentooanyalldev-libs/openssl< 1.0.2nUNKNOWN

Related

nessus 51
ibm 58
oraclelinux 2
redhat 1
archlinux 4
centos 1
openvas 27
fedora 5
photon 4
freebsd_advisory 2
mageia 2
symantec 2
freebsd 5
osv 4
debian 6
altlinux 10
ubuntu 2
slackware 1
nodejsblog 2
cloudfoundry 1
suse 2
amazon 2
f5 1
redhatcve 1
prion 1
aix 1
openssl 1
nessus
nessus
Juniper NSM < 2012.2R14 OpenSSL Multiple Vulnerabilities (JSA10851)
2018-04-27 00:00:00
GLSA-201712-03 : OpenSSL: Multiple vulnerabilities
2017-12-15 00:00:00
RHEL 7 : openssl (RHSA-2018:0998)
2018-04-11 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2017-3735, CVE-2017-3736, CVE-2017-3737, CVE-2017-3738)
2018-10-30 18:30:02
Security Bulletin: Vulnerabilities in OpenSSL affect IBM Systems Director Platform Agent .
2018-06-18 01:42:22
Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Flex System Manager (FSM)
2018-06-18 01:42:30
oraclelinux
oraclelinux
openssl security update
2018-04-18 00:00:00
openssl security and bug fix update
2018-04-16 00:00:00
redhat
redhat
(RHSA-2018:0998) Moderate: openssl security and bug fix update
2018-04-10 05:05:23
archlinux
archlinux
[ASA-201712-11] lib32-openssl-1.0: multiple issues
2017-12-17 00:00:00
[ASA-201712-9] openssl-1.0: multiple issues
2017-12-16 00:00:00
[ASA-201711-15] lib32-openssl: multiple issues
2017-11-08 00:00:00
centos
centos
openssl security update
2018-04-26 17:48:29
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:0002-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0293-1)
2021-06-09 00:00:00
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2018-1179)
2020-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: compat-openssl10-1.0.2m-1.fc26
2017-11-22 02:35:21
[SECURITY] Fedora 26 Update: openssl-1.1.0g-1.fc26
2017-11-28 16:28:13
[SECURITY] Fedora 27 Update: compat-openssl10-1.0.2m-1.fc27
2017-11-15 18:00:30
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-0010-A
2018-01-06 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0097-A
2018-01-06 00:00:00
Moderate Photon OS Security Update - PHSA-2018-0097
2018-01-06 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:11.openssl
2017-11-29 00:00:00
FreeBSD-SA-17:12.openssl
2017-12-09 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2017-11-09 01:43:48
Updated openssl packages fix security vulnerabilities
2017-12-17 02:20:04
symantec
symantec
SA157: OpenSSL Vulnerabilities 28-Aug-2017 and 2-Nov-2017
2017-11-30 08:00:00
SA159: OpenSSL Vulnerabilities 7-Dec-2017
2018-01-16 08:00:00
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2017-11-29 00:00:00
OpenSSL -- Multiple vulnerabilities
2017-11-02 00:00:00
OpenSSL -- multiple vulnerabilities
2017-12-07 00:00:00
osv
osv
openssl1.0 - security update
2017-11-03 00:00:00
openssl1.0 - security update
2017-12-17 00:00:00
openssl - security update
2017-11-02 00:00:00
debian
debian
[SECURITY] [DSA 4018-1] openssl security update
2017-11-03 23:23:25
[SECURITY] [DSA 4017-1] openssl1.0 security update
2017-11-03 23:03:01
[SECURITY] [DSA 4065-1] openssl1.0 security update
2017-12-17 13:59:51
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2m-alt1
2017-11-04 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2n-alt1
2017-12-07 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2n-alt1
2017-12-07 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2017-12-11 00:00:00
OpenSSL vulnerabilities
2017-11-06 00:00:00
slackware
slackware
[slackware-security] openssl
2017-12-09 03:52:34
nodejsblog
nodejsblog
OpenSSL update, 1.0.2m
2017-10-30 00:00:00
Data Confidentiality/Integrity Vulnerability, December 2017
2017-12-08 00:00:00
cloudfoundry
cloudfoundry
USN-3475-1: OpenSSL vulnerabilities | Cloud Foundry
2017-11-27 00:00:00
suse
suse
Security update for openssl (important)
2017-12-16 06:08:45
Security update for openssl (important)
2017-12-16 15:07:17
amazon
amazon
Medium: openssl
2018-05-10 17:29:00
Medium: openssl
2018-04-26 17:38:00
f5
f5
K21462542 : OpenSSL vulnerability CVE-2017-3735
2017-10-13 00:00:00
redhatcve
redhatcve
CVE-2017-3735
2019-11-06 04:24:26
prion
prion
Design/Logic Flaw
2017-08-28 19:29:00
aix
aix
Vulnerability in OpenSSL affects AIX
2017-12-14 14:57:00
openssl
openssl
Vulnerability in OpenSSL - Malformed X.509 IPAddressFamily could cause OOB read
2017-08-28 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.946

Percentile

99.2%

JSON
Related for GLSA-201712-03
nessus51ibm58oraclelinux2redhat1archlinux4centos1openvas27fedora5photon4freebsd_advisory2mageia2symantec2freebsd5osv4debian6altlinux10ubuntu2slackware1nodejsblog2cloudfoundry1suse2amazon2f51redhatcve1prion1aix1openssl1