CVEvulnerability
CVE-2017-3735
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-08-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-119
Description
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Affected configurations
• openssl openssl 0.9.7j
• openssl openssl 0.9.7k
• openssl openssl 0.9.7l
• openssl openssl 0.9.7m
• openssl openssl 0.9.8
• openssl openssl 0.9.8a
• openssl openssl 0.9.8b
• openssl openssl 0.9.8c
• openssl openssl 0.9.8d
• openssl openssl 0.9.8e
• openssl openssl 0.9.8f
• openssl openssl 0.9.8g
• openssl openssl 0.9.8h
• openssl openssl 0.9.8i
• openssl openssl 0.9.8j
• openssl openssl 0.9.8k
• openssl openssl 0.9.8l
• openssl openssl 0.9.8m
• openssl openssl 0.9.8n
• openssl openssl 0.9.8o
• openssl openssl 0.9.8p
• openssl openssl 0.9.8q
• openssl openssl 0.9.8r
• openssl openssl 0.9.8s
• openssl openssl 0.9.8t
• openssl openssl 0.9.8u
• openssl openssl 0.9.8v
• openssl openssl 0.9.8w
• openssl openssl 0.9.8x
• openssl openssl 0.9.8y
• openssl openssl 0.9.8z
• openssl openssl 0.9.8za
• openssl openssl 0.9.8zb
• openssl openssl 0.9.8zc
• openssl openssl 0.9.8ze
• openssl openssl 0.9.8zg
• openssl openssl 1.0.0
• openssl openssl 1.0.0a
• openssl openssl 1.0.0b
• openssl openssl 1.0.0c
• openssl openssl 1.0.0d
• openssl openssl 1.0.0e
• openssl openssl 1.0.0f
• openssl openssl 1.0.0g
• openssl openssl 1.0.0h
• openssl openssl 1.0.0i
• openssl openssl 1.0.0j
• openssl openssl 1.0.0k
• openssl openssl 1.0.0l
• openssl openssl 1.0.0m
• openssl openssl 1.0.0n
• openssl openssl 1.0.0o
• openssl openssl 1.0.0p
• openssl openssl 1.0.0q
• openssl openssl 1.0.0r
• openssl openssl 1.0.0s
• openssl openssl 1.0.1
• openssl openssl 1.0.1a
• openssl openssl 1.0.1b
• openssl openssl 1.0.1c
… and 30 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html www.oracle.com
- http://www.securityfocus.com/bid/100515 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039726 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:3221 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:3505 access.redhat.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf cert-portal.siemens.com
- https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822 github.com
- https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html lists.debian.org
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc security.FreeBSD.org
- https://security.gentoo.org/glsa/201712-03 security.gentoo.org
- https://security.netapp.com/advisory/ntap-20170927-0001/ Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171107-0002/ Issue Tracking, Third Party Advisory
- https://support.apple.com/HT208331 support.apple.com
- https://usn.ubuntu.com/3611-2/ usn.ubuntu.com
- https://www.debian.org/security/2017/dsa-4017 Third Party Advisory
- https://www.debian.org/security/2017/dsa-4018 Third Party Advisory
- https://www.openssl.org/news/secadv/20170828.txt Patch, Vendor Advisory
- https://www.openssl.org/news/secadv/20171102.txt Issue Tracking, Vendor Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html www.oracle.com
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html www.oracle.com
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html www.oracle.com
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html www.oracle.com
- https://www.tenable.com/security/tns-2017-14 Issue Tracking, Third Party Advisory
- https://www.tenable.com/security/tns-2017-15 www.tenable.com
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html www.oracle.com
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html www.oracle.com
- http://www.securityfocus.com/bid/100515 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039726 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:3221 access.redhat.com
- https://access.redhat.com/errata/RHSA-2018:3505 access.redhat.com
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf cert-portal.siemens.com
- https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822 github.com
- https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html lists.debian.org
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc security.FreeBSD.org
- https://security.gentoo.org/glsa/201712-03 security.gentoo.org
- https://security.netapp.com/advisory/ntap-20170927-0001/ Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171107-0002/ Issue Tracking, Third Party Advisory
- https://support.apple.com/HT208331 support.apple.com
- https://usn.ubuntu.com/3611-2/ usn.ubuntu.com
- https://www.debian.org/security/2017/dsa-4017 Third Party Advisory
- https://www.debian.org/security/2017/dsa-4018 Third Party Advisory
- https://www.openssl.org/news/secadv/20170828.txt Patch, Vendor Advisory
- https://www.openssl.org/news/secadv/20171102.txt Issue Tracking, Vendor Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html www.oracle.com
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html www.oracle.com
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html www.oracle.com
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html www.oracle.com
- https://www.tenable.com/security/tns-2017-14 Issue Tracking, Third Party Advisory
- https://www.tenable.com/security/tns-2017-15 www.tenable.com