PT-2017-3947 · Openssl+7 · Openssl+7

Publicado

2017-08-28

·

Atualizado

2024-06-15

·

CVE-2017-3735

CVSS v3.1

5.3

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.2m OpenSSL versions prior to 1.1.0g
Description The issue is related to parsing an IPAddressFamily extension in an X.509 certificate, which can lead to a one-byte overread. This results in an incorrect text display of the certificate. The bug has been present since 2006.
Recommendations For versions prior to 1.0.2m, update to version 1.0.2m or later. For versions prior to 1.1.0g, update to version 1.1.0g or later.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2017-2586
BDU:2020-02912
CESA-2018_3221
CVE-2017-3735
DLA-1157-1
DSA-4017-1
DSA-4018-1
FREEBSD-SA-17_11
MGASA-2017-0405
OESA-2022-1938
OPENSUSE-SU-2024:11126-1
OPENSUSE-SU-2024:11127-1
RHSA-2018:3221
RHSA-2018_3221
SUSE-FU-2022:0445-1
SUSE-SU-2017:2968-1
SUSE-SU-2017:2981-1
SUSE-SU-2017:3169-1
SUSE-SU-2017_2968-1
SUSE-SU-2017_2981-1
SUSE-SU-2017_3169-1
SUSE-SU-2018:0002-1
SUSE-SU-2018:0112-1
SUSE-SU-2018:0293-1
SUSE-SU-2019:14246-1
SUSE-SU-2019_14246-1
USN-3475-1
USN-3611-2

Produtos afetados

Alt Linux
Centos
Freebsd
Ibm Aix
Openssl
Red Hat
Suse
Ubuntu