CVE-2017-3735 While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been prese...
MediumCVSS 5.3
EPSS 21.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/openssl(Debian:12) | < 1.1.0g-1 | 1.1.0g-1 |
| debian/openssl(Debian:13) | < 1.1.0g-1 | 1.1.0g-1 |
| debian/openssl(Debian:14) | < 1.1.0g-1 | 1.1.0g-1 |
| OpenSSL | = 0.9.7j | No fix listed |
| OpenSSL | = 0.9.7k | No fix listed |
| OpenSSL | = 0.9.7l | No fix listed |
| OpenSSL | = 0.9.7m | No fix listed |
| OpenSSL | = 0.9.8 | No fix listed |
| OpenSSL | = 0.9.8a | No fix listed |
| OpenSSL | = 0.9.8b | No fix listed |
| OpenSSL | = 0.9.8c | No fix listed |
| OpenSSL | = 0.9.8d | No fix listed |
| OpenSSL | = 0.9.8e | No fix listed |
| OpenSSL | = 0.9.8f | No fix listed |
| OpenSSL | = 0.9.8g | No fix listed |
| OpenSSL | = 0.9.8h | No fix listed |
| OpenSSL | = 0.9.8i | No fix listed |
| OpenSSL | = 0.9.8j | No fix listed |
| OpenSSL | = 0.9.8k | No fix listed |
| OpenSSL | = 0.9.8l | No fix listed |
| OpenSSL | = 0.9.8m | No fix listed |
| OpenSSL | = 0.9.8m-beta1 | No fix listed |
| OpenSSL | = 0.9.8n | No fix listed |
| OpenSSL | = 0.9.8o | No fix listed |
| OpenSSL | = 0.9.8p | No fix listed |
Show 86 more
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSSL | = 0.9.8q | No fix listed |
| OpenSSL | = 0.9.8r | No fix listed |
| OpenSSL | = 0.9.8s | No fix listed |
| OpenSSL | = 0.9.8t | No fix listed |
| OpenSSL | = 0.9.8u | No fix listed |
| OpenSSL | = 0.9.8v | No fix listed |
| OpenSSL | = 0.9.8w | No fix listed |
| OpenSSL | = 0.9.8x | No fix listed |
| OpenSSL | = 0.9.8y | No fix listed |
| OpenSSL | = 0.9.8z | No fix listed |
| OpenSSL | = 0.9.8za | No fix listed |
| OpenSSL | = 0.9.8zb | No fix listed |
| OpenSSL | = 0.9.8zc | No fix listed |
| OpenSSL | = 0.9.8ze | No fix listed |
| OpenSSL | = 0.9.8zg | No fix listed |
| OpenSSL | = 1.0.0 | No fix listed |
| OpenSSL | = 1.0.0-beta1 | No fix listed |
| OpenSSL | = 1.0.0-beta2 | No fix listed |
| OpenSSL | = 1.0.0-beta3 | No fix listed |
| OpenSSL | = 1.0.0-beta4 | No fix listed |
| OpenSSL | = 1.0.0-beta5 | No fix listed |
| OpenSSL | = 1.0.0a | No fix listed |
| OpenSSL | = 1.0.0b | No fix listed |
| OpenSSL | = 1.0.0c | No fix listed |
| OpenSSL | = 1.0.0d | No fix listed |
| OpenSSL | = 1.0.0e | No fix listed |
| OpenSSL | = 1.0.0f | No fix listed |
| OpenSSL | = 1.0.0g | No fix listed |
| OpenSSL | = 1.0.0h | No fix listed |
| OpenSSL | = 1.0.0i | No fix listed |
| OpenSSL | = 1.0.0j | No fix listed |
| OpenSSL | = 1.0.0k | No fix listed |
| OpenSSL | = 1.0.0l | No fix listed |
| OpenSSL | = 1.0.0m | No fix listed |
| OpenSSL | = 1.0.0n | No fix listed |
| OpenSSL | = 1.0.0o | No fix listed |
| OpenSSL | = 1.0.0p | No fix listed |
| OpenSSL | = 1.0.0q | No fix listed |
| OpenSSL | = 1.0.0r | No fix listed |
| OpenSSL | = 1.0.0s | No fix listed |
| OpenSSL | = 1.0.1 | No fix listed |
| OpenSSL | = 1.0.1-beta1 | No fix listed |
| OpenSSL | = 1.0.1-beta2 | No fix listed |
| OpenSSL | = 1.0.1-beta3 | No fix listed |
| OpenSSL | = 1.0.1a | No fix listed |
| OpenSSL | = 1.0.1b | No fix listed |
| OpenSSL | = 1.0.1c | No fix listed |
| OpenSSL | = 1.0.1d | No fix listed |
| OpenSSL | = 1.0.1e | No fix listed |
| OpenSSL | = 1.0.1f | No fix listed |
| OpenSSL | = 1.0.1g | No fix listed |
| OpenSSL | = 1.0.1h | No fix listed |
| OpenSSL | = 1.0.1i | No fix listed |
| OpenSSL | = 1.0.1j | No fix listed |
| OpenSSL | = 1.0.1k | No fix listed |
| OpenSSL | = 1.0.1l | No fix listed |
| OpenSSL | = 1.0.2 | No fix listed |
| OpenSSL | = 1.0.2-beta1 | No fix listed |
| OpenSSL | = 1.0.2-beta2 | No fix listed |
| OpenSSL | = 1.0.2-beta3 | No fix listed |
| OpenSSL | = 1.0.2a | No fix listed |
| OpenSSL | = 1.0.2b | No fix listed |
| OpenSSL | = 1.0.2c | No fix listed |
| OpenSSL | = 1.0.2d | No fix listed |
| OpenSSL | = 1.0.2e | No fix listed |
| OpenSSL | = 1.0.2f | No fix listed |
| OpenSSL | = 1.0.2h | No fix listed |
| OpenSSL | = 1.0.2i | No fix listed |
| OpenSSL | = 1.0.2j | No fix listed |
| OpenSSL | = 1.0.2k | No fix listed |
| OpenSSL | = 1.0.2l | No fix listed |
| OpenSSL | = 1.1.0 | No fix listed |
| OpenSSL | = 1.1.0a | No fix listed |
| OpenSSL | = 1.1.0b | No fix listed |
| OpenSSL | = 1.1.0c | No fix listed |
| OpenSSL | = 1.1.0d | No fix listed |
| OpenSSL | = 1.1.0e | No fix listed |
| OpenSSL | = 1.1.0f | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| alpine/openssl(Alpine:v3.3) | < 1.0.2m-r0 | 1.0.2m-r0 |
| alpine/openssl(Alpine:v3.4) | < 1.0.2m-r0 | 1.0.2m-r0 |
| alpine/openssl(Alpine:v3.5) | < 1.0.2m-r0 | 1.0.2m-r0 |
| alpine/openssl(Alpine:v3.6) | < 1.0.2m-r0 | 1.0.2m-r0 |
| alpine/openssl(Alpine:v3.7) | < 1.0.2m-r0 | 1.0.2m-r0 |
| alpine/openssl(Alpine:v3.8) | < 1.0.2m-r0 | 1.0.2m-r0 |
References
- Debian Security Tracker CVE-2017-3735 vendor-advisory
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- 100515 third-party-advisory vdb-entry
- 1039726 third-party-advisory vdb-entry
- RHSA-2018:3221 vendor-advisory
- RHSA-2018:3505 vendor-advisory
- cert-portal.siemens.com
- github.com
- [debian-lts-announce] 20171109 [SECURITY] [DLA-1157-1] openssl security update mailing-list
- FreeBSD-SA-17:11 vendor-advisory
- GLSA-201712-03 vendor-advisory
- security.netapp.com issue-tracking third-party-advisory
- security.netapp.com issue-tracking third-party-advisory
- support.apple.com
- USN-3611-2 vendor-advisory
- DSA-4017 third-party-advisory vendor-advisory
- DSA-4018 third-party-advisory vendor-advisory
- www.openssl.org patch vendor-advisory
- www.openssl.org issue-tracking vendor-advisory
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.oracle.com
- www.tenable.com issue-tracking third-party-advisory
- www.tenable.com
- security.alpinelinux.org vendor-advisory