Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3475-1
HistoryNov 06, 2017 - 12:00 a.m.

OpenSSL vulnerabilities

2017-11-0600:00:00
ubuntu.com
39

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.028 Low

EPSS

Percentile

90.5%

JSON

Releases

  • Ubuntu 17.10
  • Ubuntu 17.04
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

It was discovered that OpenSSL incorrectly parsed the IPAddressFamily
extension in X.509 certificates, resulting in an erroneous display of the
certificate in text format. (CVE-2017-3735)

It was discovered that OpenSSL incorrectly performed the x86_64 Montgomery
squaring procedure. While unlikely, a remote attacker could possibly use
this issue to recover private keys. This issue only applied to Ubuntu 16.04
LTS, Ubuntu 16.10 and Ubuntu 17.04. (CVE-2017-3736)

OSVersionArchitecturePackageVersionFilename
Ubuntu17.10noarchlibssl1.0.0< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchlibcrypto1.0.0-udeb< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchlibssl-dev< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchlibssl-doc< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchlibssl1.0-dev< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchlibssl1.0.0-dbg< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchlibssl1.0.0-udeb< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchopenssl< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.10noarchopenssl-dbgsym< 1.0.2g-1ubuntu13.2UNKNOWN
Ubuntu17.04noarchlibssl1.0.0< 1.0.2g-1ubuntu11.3UNKNOWN
Rows per page:
1-10 of 461

Related

altlinux 5
ibm 60
symantec 1
debian 5
osv 5
fedora 5
nessus 49
freebsd_advisory 1
mageia 1
openvas 27
freebsd 2
archlinux 4
nodejsblog 1
cloudfoundry 1
gentoo 1
redhatcve 2
f5 2
cve 2
checkpoint_advisories 1
oraclelinux 3
veracode 2
alpinelinux 2
debiancve 2
prion 2
openssl 2
aix 1
suse 2
ubuntucve 2
slackware 1
ubuntu 1
amazon 2
centos 1
redhat 1
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2m-alt1
2017-11-04 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2m-alt0.M80P.1
2017-11-07 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 1.0.2m-alt1
2017-11-04 00:00:00
ibm
ibm
Security Bulletin: Vulnerability affects Watson Explorer Foundational Components (CVE-2017-3735, CVE-2017-3736)
2018-08-22 13:35:59
Security Bulletin: Vulnerabilities in OpenSSL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2017-3735, CVE-2017-3736)
2018-06-17 15:47:22
Security Bulletin: Multiple vulnerabilities in Open Source OpenSSL affect IBM Netezza Host Management
2019-10-18 03:10:29
symantec
symantec
SA157: OpenSSL Vulnerabilities 28-Aug-2017 and 2-Nov-2017
2017-11-30 08:00:00
debian
debian
[SECURITY] [DSA 4018-1] openssl security update
2017-11-03 23:23:25
[SECURITY] [DSA 4017-1] openssl1.0 security update
2017-11-03 23:03:01
[SECURITY] [DSA 4017-1] openssl1.0 security update
2017-11-03 23:03:01
osv
osv
openssl1.0 - security update
2017-11-03 00:00:00
openssl - security update
2017-11-02 00:00:00
CVE-2017-3735
2017-08-28 19:29:01
fedora
fedora
[SECURITY] Fedora 26 Update: openssl-1.1.0g-1.fc26
2017-11-28 16:28:13
[SECURITY] Fedora 27 Update: compat-openssl10-1.0.2m-1.fc27
2017-11-15 18:00:30
[SECURITY] Fedora 27 Update: openssl-1.1.0g-1.fc27
2017-11-21 23:39:13
nessus
nessus
OpenSSL 1.1.0 < 1.1.0g RSA/DSA Unspecified Carry Issue
2017-11-06 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : OpenSSL vulnerabilities (USN-3475-1)
2017-11-07 00:00:00
Photon OS 1.0: Openssl PHSA-2017-0042
2019-02-07 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-17:11.openssl
2017-11-29 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerabilities
2017-11-09 01:43:48
openvas
openvas
Mageia: Security Advisory (MGASA-2017-0405)
2022-01-28 00:00:00
Fedora Update for openssl FEDORA-2017-4cf72e2c11
2017-11-23 00:00:00
Fedora Update for openssl FEDORA-2017-dbec196dd8
2017-12-04 00:00:00
freebsd
freebsd
FreeBSD -- OpenSSL multiple vulnerabilities
2017-11-29 00:00:00
OpenSSL -- Multiple vulnerabilities
2017-11-02 00:00:00
archlinux
archlinux
[ASA-201712-9] openssl-1.0: multiple issues
2017-12-16 00:00:00
[ASA-201711-15] lib32-openssl: multiple issues
2017-11-08 00:00:00
[ASA-201711-14] openssl: multiple issues
2017-11-07 00:00:00
nodejsblog
nodejsblog
OpenSSL update, 1.0.2m
2017-10-30 00:00:00
cloudfoundry
cloudfoundry
USN-3475-1: OpenSSL vulnerabilities | Cloud Foundry
2017-11-27 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2017-12-14 00:00:00
redhatcve
redhatcve
CVE-2017-3735
2019-11-06 04:24:26
CVE-2017-3736
2019-10-10 23:39:39
f5
f5
K21462542 : OpenSSL vulnerability CVE-2017-3735
2017-10-13 00:00:00
K14363514 : OpenSSL vulnerability CVE-2017-3736
2017-12-15 00:00:00
cve
cve
CVE-2017-3735
2017-08-28 19:29:00
CVE-2017-3736
2017-11-02 17:29:00
checkpoint_advisories
checkpoint_advisories
OpenSSL X.509 IPAddressFamily Extension Parsing Out-of-Bounds Read (CVE-2017-3735)
2017-09-06 00:00:00
oraclelinux
oraclelinux
openssl security update
2018-06-25 00:00:00
openssl security and bug fix update
2018-04-16 00:00:00
openssl security update
2018-04-18 00:00:00
veracode
veracode
Buffer Overread
2017-08-29 00:42:31
Carry Propagation
2017-11-03 02:16:40
alpinelinux
alpinelinux
CVE-2017-3735
2017-08-28 19:29:00
CVE-2017-3736
2017-11-02 17:29:00
debiancve
debiancve
CVE-2017-3735
2017-08-28 19:29:00
CVE-2017-3736
2017-11-02 17:29:00
prion
prion
Design/Logic Flaw
2017-08-28 19:29:00
Design/Logic Flaw
2017-11-02 17:29:00
openssl
openssl
Vulnerability in OpenSSL CVE-2017-3735
2017-08-28 00:00:00
Vulnerability in OpenSSL CVE-2017-3736
2017-11-02 00:00:00
aix
aix
Vulnerability in OpenSSL affects AIX
2017-12-14 14:57:00
suse
suse
Security update for openssl (important)
2017-11-10 18:14:09
Security update for openssl1 (important)
2017-11-10 09:18:31
ubuntucve
ubuntucve
CVE-2017-3735
2017-08-28 00:00:00
CVE-2017-3736
2017-11-02 00:00:00
slackware
slackware
[slackware-security] openssl
2017-11-03 06:24:38
ubuntu
ubuntu
OpenSSL vulnerabilities
2018-04-17 00:00:00
amazon
amazon
Medium: openssl
2018-12-05 23:20:00
Medium: openssl
2018-11-07 22:07:00
centos
centos
openssl security update
2018-04-26 17:48:29
redhat
redhat
(RHSA-2018:0998) Moderate: openssl security and bug fix update
2018-04-10 05:05:23

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.028 Low

EPSS

Percentile

90.5%

JSON
Related for USN-3475-1
altlinux5ibm60symantec1debian5osv5fedora5nessus49freebsd_advisory1mageia1openvas27freebsd2archlinux4nodejsblog1cloudfoundry1gentoo1redhatcve2f52cve2checkpoint_advisories1oraclelinux3veracode2alpinelinux2debiancve2prion2openssl2aix1suse2ubuntucve2slackware1ubuntu1amazon2centos1redhat1