UpHeron
All vulnerabilities

Servers and applications

CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

Severity
Medium 5.3
Published
28 Aug 2017
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • Version 1.1.0f
  • Version 1.1.0e
  • Version 1.1.0d
  • Version 1.1.0c
All 100 release lines
  • Version 0.9.7j
  • Version 0.9.7k
  • Version 0.9.7l
  • Version 0.9.7m
  • Version 0.9.8m-beta1
  • Version 0.9.8
  • Version 0.9.8a
  • Version 0.9.8b
  • Version 0.9.8c
  • Version 0.9.8d
  • Version 0.9.8e
  • Version 0.9.8f
  • Version 0.9.8g
  • Version 0.9.8h
  • Version 0.9.8i
  • Version 0.9.8j
  • Version 0.9.8k
  • Version 0.9.8l
  • Version 0.9.8m
  • Version 0.9.8n
  • Version 0.9.8o
  • Version 0.9.8p
  • Version 0.9.8q
  • Version 0.9.8r
  • Version 0.9.8s
  • Version 0.9.8t
  • Version 0.9.8u
  • Version 0.9.8v
  • Version 0.9.8w
  • Version 0.9.8x
  • Version 0.9.8y
  • Version 0.9.8z
  • Version 0.9.8za
  • Version 0.9.8zb
  • Version 0.9.8zc
  • Version 0.9.8ze
  • Version 0.9.8zg
  • Version 1.0.0-beta1
  • Version 1.0.0-beta2
  • Version 1.0.0-beta3
  • Version 1.0.0-beta4
  • Version 1.0.0-beta5
  • Version 1.0.0
  • Version 1.0.0a
  • Version 1.0.0b
  • Version 1.0.0c
  • Version 1.0.0d
  • Version 1.0.0e
  • Version 1.0.0f
  • Version 1.0.0g
  • Version 1.0.0h
  • Version 1.0.0i
  • Version 1.0.0j
  • Version 1.0.0k
  • Version 1.0.0l
  • Version 1.0.0m
  • Version 1.0.0n
  • Version 1.0.0o
  • Version 1.0.0p
  • Version 1.0.0q
  • Version 1.0.0r
  • Version 1.0.0s
  • Version 1.0.1-beta1
  • Version 1.0.1-beta2
  • Version 1.0.1-beta3
  • Version 1.0.1
  • Version 1.0.1a
  • Version 1.0.1b
  • Version 1.0.1c
  • Version 1.0.1d
  • Version 1.0.1e
  • Version 1.0.1f
  • Version 1.0.1g
  • Version 1.0.1h
  • Version 1.0.1i
  • Version 1.0.1j
  • Version 1.0.1k
  • Version 1.0.1l
  • Version 1.0.2-beta1
  • Version 1.0.2-beta2
  • Version 1.0.2-beta3
  • Version 1.0.2
  • Version 1.0.2a
  • Version 1.0.2b
  • Version 1.0.2c
  • Version 1.0.2d
  • Version 1.0.2e
  • Version 1.0.2f
  • Version 1.0.2h
  • Version 1.0.2i
  • Version 1.0.2j
  • Version 1.0.2k
  • Version 1.0.2l
  • Version 1.1.0
  • Version 1.1.0a
  • Version 1.1.0b
  • Version 1.1.0c
  • Version 1.1.0d
  • Version 1.1.0e
  • Version 1.1.0f

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-3735
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-3735