Published: 28/08/2017 Updated: 13/12/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL prior to 1.0.2m and 1.1.0g.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openssl openssl 1.1.0e
openssl openssl 0.9.8ze
openssl openssl 1.0.2a
openssl openssl 0.9.8b
openssl openssl 1.0.1j
openssl openssl 0.9.7l
openssl openssl 0.9.8m
openssl openssl 1.1.0f
openssl openssl 1.0.0n
openssl openssl 1.0.1
openssl openssl 0.9.8c
openssl openssl 1.0.0c
openssl openssl 1.0.0i
openssl openssl 1.0.0
openssl openssl 1.0.1h
openssl openssl 0.9.8n
openssl openssl 0.9.8p
openssl openssl 1.0.2e
openssl openssl 1.0.2j
openssl openssl 1.0.0m
openssl openssl 1.0.2b
openssl openssl 1.0.1c
openssl openssl 0.9.7j
openssl openssl 0.9.8e
openssl openssl 0.9.8u
openssl openssl 0.9.8za
openssl openssl 1.0.1g
openssl openssl 0.9.8g
openssl openssl 1.0.0h
openssl openssl 0.9.8k
openssl openssl 0.9.8d
openssl openssl 1.0.0e
openssl openssl 1.0.0f
openssl openssl 0.9.8j
openssl openssl 1.1.0c
openssl openssl 1.0.0d
openssl openssl 0.9.7k
openssl openssl 1.0.0j
openssl openssl 0.9.8s
openssl openssl 1.0.0p
openssl openssl 1.0.1a
openssl openssl 1.0.0s
openssl openssl 1.0.2h
openssl openssl 1.0.0o
openssl openssl 0.9.8l
openssl openssl 0.9.8zc
openssl openssl 1.0.1d
openssl openssl 1.0.0k
openssl openssl 0.9.8r
openssl openssl 1.0.2c
openssl openssl 0.9.8t
openssl openssl 0.9.8z
openssl openssl 1.1.0b
openssl openssl 1.1.0d
openssl openssl 0.9.8a
openssl openssl 1.1.0
openssl openssl 1.0.2
openssl openssl 0.9.7m
openssl openssl 1.0.1k
openssl openssl 1.0.1b
openssl openssl 1.1.0a
openssl openssl 0.9.8zb
openssl openssl 0.9.8o
openssl openssl 0.9.8q
openssl openssl 0.9.8w
openssl openssl 1.0.1e
openssl openssl 1.0.1l
openssl openssl 0.9.8
openssl openssl 1.0.1f
openssl openssl 1.0.0l
openssl openssl 0.9.8v
openssl openssl 1.0.0r
openssl openssl 0.9.8i
openssl openssl 0.9.8f
openssl openssl 0.9.8y
openssl openssl 1.0.0a
openssl openssl 1.0.0q
openssl openssl 0.9.8h
openssl openssl 0.9.8zg
openssl openssl 1.0.2f
openssl openssl 0.9.8x
openssl openssl 1.0.1i
openssl openssl 1.0.0b
openssl openssl 1.0.2i
openssl openssl 1.0.0g
openssl openssl 1.0.2d
openssl openssl 1.0.2k
openssl openssl 1.0.2l
debian debian linux 8.0
debian debian linux 9.0

Synopsis Critical: Red Hat Ansible Tower 331-2 Release - Container Image Type/Severity Security Advisory: Critical Topic Security Advisory Description Red Hat Ansible Tower 331 is now available and contains the following bug fixes: Fixed event callback error when in-line vaulted variabl ...

Synopsis Moderate: openssl security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for openssl is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...

Several security issues were fixed in OpenSSL ...

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2017-3735 It was discovered that OpenSSL is prone to a one-byte buffer overread while parsing a malformed IPAddressFamily extension in an X509 certificate ...

Libgcrypt allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsac, aka the Return Of the Hidden Number Problem or ROHNP To discover an ECDSA key, the attacker needs access to either the local machine or a d ...

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished This could be exploited in a Denial Of Service attack( ...

While parsing an IPAddressFamily extension in an X509 certificate, it is possible to do a one-byte overread This would result in an incorrect text display of the certificate This bug has been present since 2006 and is present in all versions of OpenSSL before 102m and 110g ...

A security issue has been found in OpenSSL < 110g If an X509 certificate has a malformed IPAddressFamily extension, OpenSSL could do a one-byte buffer overread The most likely result would be an erroneous display of the certificate in text format ...

Nessus leverages third-party software to help provide underlying functionality One of the third-party components (OpenSSL) was found to contain vulnerabilities, and updated versions have been made available by the providers Out of caution and in line with good practice, Tenable opted to upgrade the bundled OpenSSL library to address the potentia ...

SecurityCenter leverages third-party software to help provide underlying functionality Two of the third-party components (PHP and OpenSSL) were found to contain vulnerabilities, and updated versions have been made available by the providers Out of caution and in line with good practice, Tenable opted to upgrade the bundled PHP and OpenSSL to add ...

Network kit biz Phoenix takes heat as flaws may leave industrial control system security in ashes

The Register • Shaun Nichols in San Francisco • 11 Feb 2019

Oil, gas, maritime systems affected by latest bug findings Yes, you can remotely hack factory, building site cranes. Wait, what?

Companies running a popular brand of industrial Ethernet switch are being advised to update their firmware ASAP following a series of bug disclosures. Security house Positive Technologies took credit today for the discovery of six CVE-listed security vulnerabilities in the Phoenix Contact FL Switch 3xxx, 4xxx, and 48xx industrial control switches. The flaws are addressed in firmware versions 1.35 or newer. Among the now-patched flaws were several Positive described as "critical" security risks t...

CVE-2017-3735

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

Recent Articles

References

Vulmon Search

About

Products

Connect