2017-10-16 12:31:07 -04:00
{
2019-07-23 23:01:24 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "openssl-security@openssl.org" ,
"DATE_PUBLIC" : "2017-08-28T00:00:00" ,
"ID" : "CVE-2017-3735" ,
"STATE" : "PUBLIC"
2019-03-18 05:04:07 +00:00
} ,
2019-07-23 23:01:24 +00:00
"affects" : {
"vendor" : {
"vendor_data" : [
2019-03-18 05:04:07 +00:00
{
2019-07-23 23:01:24 +00:00
"product" : {
"product_data" : [
2019-03-18 05:04:07 +00:00
{
2019-07-23 23:01:24 +00:00
"product_name" : "OpenSSL" ,
"version" : {
"version_data" : [
2019-03-18 05:04:07 +00:00
{
2019-07-23 23:01:24 +00:00
"version_value" : "1.1.0"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"version_value" : "1.0.2"
2019-03-18 05:04:07 +00:00
}
]
}
}
]
} ,
2019-07-23 23:01:24 +00:00
"vendor_name" : "OpenSSL Software Foundation"
2019-03-18 05:04:07 +00:00
}
2019-01-16 14:04:51 -05:00
]
2019-03-18 05:04:07 +00:00
}
} ,
2019-07-23 23:01:24 +00:00
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g."
2019-03-18 05:04:07 +00:00
}
]
} ,
2019-07-23 23:01:24 +00:00
"problemtype" : {
"problemtype_data" : [
2019-03-18 05:04:07 +00:00
{
2019-07-23 23:01:24 +00:00
"description" : [
2019-03-18 05:04:07 +00:00
{
2019-07-23 23:01:24 +00:00
"lang" : "eng" ,
"value" : "out of bounds read"
2019-03-18 05:04:07 +00:00
}
]
}
]
} ,
2019-07-23 23:01:24 +00:00
"references" : {
"reference_data" : [
2019-03-18 05:04:07 +00:00
{
2019-07-23 23:01:24 +00:00
"name" : "1039726" ,
"refsource" : "SECTRACK" ,
"url" : "http://www.securitytracker.com/id/1039726"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://security.netapp.com/advisory/ntap-20171107-0002/" ,
"refsource" : "CONFIRM" ,
"url" : "https://security.netapp.com/advisory/ntap-20171107-0002/"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "USN-3611-2" ,
"refsource" : "UBUNTU" ,
"url" : "https://usn.ubuntu.com/3611-2/"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "DSA-4018" ,
"refsource" : "DEBIAN" ,
"url" : "https://www.debian.org/security/2017/dsa-4018"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "GLSA-201712-03" ,
"refsource" : "GENTOO" ,
"url" : "https://security.gentoo.org/glsa/201712-03"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://support.apple.com/HT208331" ,
"refsource" : "CONFIRM" ,
"url" : "https://support.apple.com/HT208331"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "[debian-lts-announce] 20171109 [SECURITY] [DLA-1157-1] openssl security update" ,
"refsource" : "MLIST" ,
"url" : "https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822" ,
"refsource" : "MISC" ,
"url" : "https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "RHSA-2018:3505" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2018:3505"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://security.netapp.com/advisory/ntap-20170927-0001/" ,
"refsource" : "CONFIRM" ,
"url" : "https://security.netapp.com/advisory/ntap-20170927-0001/"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://www.tenable.com/security/tns-2017-15" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.tenable.com/security/tns-2017-15"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://www.openssl.org/news/secadv/20171102.txt" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.openssl.org/news/secadv/20171102.txt"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "DSA-4017" ,
"refsource" : "DEBIAN" ,
"url" : "https://www.debian.org/security/2017/dsa-4017"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "RHSA-2018:3221" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2018:3221"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "100515" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/100515"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://www.tenable.com/security/tns-2017-14" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.tenable.com/security/tns-2017-14"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "FreeBSD-SA-17:11" ,
"refsource" : "FREEBSD" ,
"url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"
2019-03-18 05:04:07 +00:00
} ,
{
2019-07-23 23:01:24 +00:00
"name" : "https://www.openssl.org/news/secadv/20170828.txt" ,
"refsource" : "CONFIRM" ,
"url" : "https://www.openssl.org/news/secadv/20170828.txt"
2019-04-23 04:53:58 -07:00
} ,
{
2019-07-23 23:01:24 +00:00
"url" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
2019-07-16 13:25:12 -07:00
} ,
{
2019-07-23 23:01:24 +00:00
"url" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html" ,
"refsource" : "MISC" ,
"name" : "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
2019-03-18 05:04:07 +00:00
}
]
}
}
