UpHeron
All vulnerabilities

Servers and applications

CVE-2017-3731

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users…

Severity
High 7.5
Published
4 May 2017
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
4.7.3, 6.9.5, 7.5.0
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 4.0.0 up to 4.1.2
  • From 4.2.0 before 4.7.3
  • From 5.0.0 up to 5.12.0
  • From 6.0.0 up to 6.8.1
  • From 6.9.0 before 6.9.5
  • From 7.0.0 before 7.5.0
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 1.1.0c
  • Version 1.1.0b
  • Version 1.1.0a
  • Version 1.0.2j
All 16 release lines
  • Version 1.0.2-beta1
  • Version 1.0.2-beta2
  • Version 1.0.2-beta3
  • Version 1.0.2
  • Version 1.0.2a
  • Version 1.0.2b
  • Version 1.0.2c
  • Version 1.0.2d
  • Version 1.0.2e
  • Version 1.0.2f
  • Version 1.0.2h
  • Version 1.0.2i
  • Version 1.0.2j
  • Version 1.1.0a
  • Version 1.1.0b
  • Version 1.1.0c

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-3731
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-3731