The OpenSSL library has been found to contain vulnerability CVE-2017-3731. Palo Alto Networks software makes use of the vulnerable library and may be affected. (Ref # PAN-73914 / CVE-2017-3731)
The OpenSSL library in use by PAN-OS is patched on a regular basis.
This issue affects PAN-OS 6.1, PAN-OS 7.0.14 and earlier, PAN-OS 7.1, PAN-OS 8.0

Work around:
N/A

References

security.paloaltonetworks.com/CVE-2017-3731

checkpoint_advisories 1

ibm 49

nvd 1

cvelist 1

ubuntucve 1

openvas 30

aix 1

osv 3

prion 1

nessus 54

alpinelinux 1

openssl 1

debiancve 1

veracode 2

cve 1

f5 1

centos 1

oraclelinux 5

amazon 1

redhat 4

altlinux 5

fedora 2

freebsd_advisory 1

slackware 1

myhack58 1

debian 2

symantec 1

mageia 2

huawei 1

archlinux 2

freebsd 1

nodejsblog 1

gentoo 1

fortinet 1

cisco 1

suse 5

ubuntu 1

cloudfoundry 1

packetstorm 1

androidsecurity 1

oracle 5

checkpoint_advisories

OpenSSL ChaCha20-Poly1305 and RC4-MD5 Integer Underflow (CVE-2017-3731)

2017-02-27 00:00:00

ibm

Security Bulletin: Vulnerability in OpenSSL affects IBM Sterling Connect:Direct for UNIX (CVE-2017-3731)

2020-07-24 22:19:08

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by an OpenSSL vulnerability (CVE-2017-3731)

2019-11-18 13:57:34

Security Bulletin: Vulnerability in OpenSSL affect IBM SONAS (CVE-2017-3731)

2018-06-18 00:32:51

nvd

CVE-2017-3731

2017-05-04 19:29:00

cvelist

CVE-2017-3731 Truncated packet could crash via OOB read

2017-01-26 00:00:00

ubuntucve

CVE-2017-3731

2017-01-26 00:00:00

openvas

Palo Alto PAN-OS OpenSSL Vulnerability

2017-05-23 00:00:00

Oracle Mysql Security Updates (oct2017-3236626) 03 - Windows

2017-10-18 00:00:00

Oracle Mysql Security Updates (oct2017-3236626) 03 - Linux

2017-10-18 00:00:00

aix

There is a vulnerability in OpenSSL used by AIX

2017-02-17 16:58:26

osv

CVE-2017-3731

2017-05-04 19:29:00

openssl - security update

2017-01-27 00:00:00

openssl - security update

2017-02-01 00:00:00

prion

Out-of-bounds

2017-05-04 19:29:00

nessus

AIX OpenSSL Advisory : openssl_advisory23.asc

2018-03-08 00:00:00

F5 Networks BIG-IP : OpenSSL vulnerability (K37526132)

2017-02-24 00:00:00

Oracle Linux 6 / 7 : openssl (ELSA-2017-0286)

2017-02-21 00:00:00

alpinelinux

CVE-2017-3731

2017-05-04 19:29:00

openssl

Vulnerability in OpenSSL CVE-2017-3731

2017-01-26 00:00:00

debiancve

CVE-2017-3731

2017-05-04 19:29:00

veracode

Denial Of Service (DoS) Through Out Of Bounds Read

2017-03-17 08:05:26

Vulnerability Through C Libraries

2017-11-01 05:30:33

cve

CVE-2017-3731

2017-05-04 19:29:00

K37526132 : OpenSSL vulnerability CVE-2017-3731

2017-02-23 00:00:00

centos

openssl security update

2017-02-21 11:44:42

oraclelinux

openssl security update

2017-02-20 00:00:00

openssl security update

2017-02-20 00:00:00

openssl security update

2017-02-20 00:00:00

amazon

Medium: openssl

2017-03-06 14:00:00

redhat

(RHSA-2017:0286) Moderate: openssl security update

2017-02-20 09:06:19

(RHSA-2018:2187) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 security update

2018-07-12 16:04:13

(RHSA-2018:2185) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 RHEL 7 security update

2018-07-12 16:04:06

altlinux

Security fix for the ALT Linux 9 package openssl10 version 1.0.2k-alt1

2017-01-26 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.2k-alt1

2017-01-26 00:00:00

Security fix for the ALT Linux 8 package openssl10 version 1.0.2k-alt0.M80P.1

2017-01-27 00:00:00

fedora

[SECURITY] Fedora 24 Update: openssl-1.0.2k-1.fc24

2017-02-09 20:52:22

[SECURITY] Fedora 25 Update: openssl-1.0.2k-1.fc25

2017-02-08 01:54:49

freebsd_advisory

FreeBSD-SA-17:02.openssl

2017-02-23 00:00:00

slackware

[slackware-security] openssl

2017-02-10 20:40:56

myhack58

OpenSSL handshake renegotiation process in the presence of the vulnerability can lead to denial of service-vulnerability warning-the black bar safety net

2017-05-22 00:00:00

debian

[SECURITY] [DSA 3773-1] openssl security update

2017-01-27 19:48:57

[SECURITY] [DLA 814-1] openssl security update

2017-02-01 23:12:31

symantec

SA141 : OpenSSL Vulnerabilities 26-Jan-2017

2017-02-09 08:00:00

mageia

Updated openssl packages fix security vulnerability

2017-02-05 23:42:41

Updated virtualbox packages fix security vulnerabilities

2017-10-27 10:16:04

huawei

Security Advisory - Three OpenSSL Vulnerabilities in Huawei Products

2017-05-03 00:00:00

archlinux

[ASA-201701-36] lib32-openssl: multiple issues

2017-01-27 00:00:00

[ASA-201701-37] openssl: multiple issues

2017-01-28 00:00:00

freebsd

OpenSSL -- multiple vulnerabilities

2017-01-26 00:00:00

nodejsblog

OpenSSL update, 1.0.2k

2017-01-27 00:00:00

gentoo

OpenSSL: Multiple vulnerabilities

2017-02-14 00:00:00

fortinet

OpenSSL Security Advisory [26 Jan 2017]

2018-07-13 00:00:00

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: January and February 2017

2017-01-30 21:28:00

suse

Security update for openssl (important)

2018-01-16 18:08:42

Security update for mysql-community-server (important)

2017-10-27 18:28:48

Security update for openssl-steam (important)

2018-02-16 12:07:45

ubuntu

OpenSSL vulnerabilities

2017-01-31 00:00:00

cloudfoundry

USN-3181-1: OpenSSL vulnerabilities | Cloud Foundry

2017-06-02 00:00:00

packetstorm

Orion Elite Hidden IP Browser Pro 7.9 OpenSSL / Tor / Man-In-The-Middle

2017-07-14 00:00:00

androidsecurity

Pixel&hairsp;/&hairsp;Nexus Security Bulletin—November 2017

2017-11-06 00:00:00

oracle

Oracle Critical Patch Update - January 2018

2018-01-16 00:00:00

Oracle Critical Patch Update Advisory - April 2019

2019-04-16 00:00:00

Oracle Critical Patch Update Advisory - April 2017

2017-04-18 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.046

Percentile

92.5%

JSON

Related for PAN-SA-2017-0012