Lucene search

CVE-2017-3736

🗓️ 02 Nov 2017 17:00:29Reported by Alpine Linux Development TeamType

alpinelinux🔗 security.alpinelinux.org👁 34 Views

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an Open Source OpenSSL vulnerability	16 Jun 201822:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in OpenSSL affects IBM Sterling B2B Integrator (CVE-2017-3736)	5 Feb 202000:53	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in OpenSSL (CVE-2017-3736)	15 Jun 201807:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by an OpenSSL vulnerability (CVE-2017-3736)	15 Jun 201807:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL Affect IBM Sterling Connect:Direct for HP NonStop (CVE-2017-3736)	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: Aspera HSTS, HSTE and Desktop Client application is affected by openSSL vulnerabilities (CVE-2017-3736)	14 Sep 201818:40	–	ibm
IBM Security Bulletins	Security Bulletin: Aspera OnDemand is affected by an openSSL vulnerability (CVE-2017-3736)	14 Sep 201818:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by an OpenSSL vulnerability (CVE-2017-3736)	2 Aug 201915:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Message Security is vulnerable to an OpenSSL Montgomery squaring function propagation flaw (CVE-2017-3736)	19 Aug 202221:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Pure Application System is affected by a vulnerability in the GSKit component (CVE-2017-3736)	29 Jun 201812:48	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Alpine	3.3-main	noarch	openssl	1.0.2m-r0	UNKNOWN
Alpine	3.4-main	noarch	openssl	1.0.2m-r0	UNKNOWN
Alpine	3.5-main	noarch	openssl	1.0.2m-r0	UNKNOWN
Alpine	3.6-main	noarch	openssl	1.0.2m-r0	UNKNOWN
Alpine	3.7-main	noarch	openssl	1.0.2m-r0	UNKNOWN
Alpine	3.8-main	noarch	openssl	1.0.2m-r0	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Nov 2017 17:29Current

6.6Medium risk

Vulners AI Score6.6

CVSS24

CVSS36.5

EPSS0.05939