CVE-2017-3735

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-3735
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3735.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-3735
Downstream
Related
Published
2017-08-28T19:29:01.353Z
Modified
2026-07-08T15:11:26.028638Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                },
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ],
            "vendor_product": "debian:debian_linux",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
10626fac1569ea37839c37b105681cd08dbe6658
Last affected
7ea5bd2b52d0e81eaef3d109b3b12545306f201c
Fixed
068b963bb7afc57f5bdd723de0dd15e7795d5822
Database specific 
{
    "cpe": [
        "cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8z:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8zb:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8zc:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8ze:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8zg:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0s:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.1.0e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.1.0f:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0.9.7j"
        },
        {
            "last_affected": "0.9.7j"
        },
        {
            "introduced": "0.9.7k"
        },
        {
            "last_affected": "0.9.7k"
        },
        {
            "introduced": "0.9.7l"
        },
        {
            "last_affected": "0.9.7l"
        },
        {
            "introduced": "0.9.7m"
        },
        {
            "last_affected": "0.9.7m"
        },
        {
            "introduced": "0.9.8"
        },
        {
            "last_affected": "0.9.8"
        },
        {
            "introduced": "0.9.8a"
        },
        {
            "last_affected": "0.9.8a"
        },
        {
            "introduced": "0.9.8b"
        },
        {
            "last_affected": "0.9.8b"
        },
        {
            "introduced": "0.9.8c"
        },
        {
            "last_affected": "0.9.8c"
        },
        {
            "introduced": "0.9.8d"
        },
        {
            "last_affected": "0.9.8d"
        },
        {
            "introduced": "0.9.8e"
        },
        {
            "last_affected": "0.9.8e"
        },
        {
            "introduced": "0.9.8f"
        },
        {
            "last_affected": "0.9.8f"
        },
        {
            "introduced": "0.9.8g"
        },
        {
            "last_affected": "0.9.8g"
        },
        {
            "introduced": "0.9.8h"
        },
        {
            "last_affected": "0.9.8h"
        },
        {
            "introduced": "0.9.8i"
        },
        {
            "last_affected": "0.9.8i"
        },
        {
            "introduced": "0.9.8j"
        },
        {
            "last_affected": "0.9.8j"
        },
        {
            "introduced": "0.9.8k"
        },
        {
            "last_affected": "0.9.8k"
        },
        {
            "introduced": "0.9.8l"
        },
        {
            "last_affected": "0.9.8l"
        },
        {
            "introduced": "0.9.8m"
        },
        {
            "last_affected": "0.9.8m"
        },
        {
            "introduced": "0.9.8n"
        },
        {
            "last_affected": "0.9.8n"
        },
        {
            "introduced": "0.9.8o"
        },
        {
            "last_affected": "0.9.8o"
        },
        {
            "introduced": "0.9.8p"
        },
        {
            "last_affected": "0.9.8p"
        },
        {
            "introduced": "0.9.8q"
        },
        {
            "last_affected": "0.9.8q"
        },
        {
            "introduced": "0.9.8r"
        },
        {
            "last_affected": "0.9.8r"
        },
        {
            "introduced": "0.9.8s"
        },
        {
            "last_affected": "0.9.8s"
        },
        {
            "introduced": "0.9.8t"
        },
        {
            "last_affected": "0.9.8t"
        },
        {
            "introduced": "0.9.8u"
        },
        {
            "last_affected": "0.9.8u"
        },
        {
            "introduced": "0.9.8v"
        },
        {
            "last_affected": "0.9.8v"
        },
        {
            "introduced": "0.9.8w"
        },
        {
            "last_affected": "0.9.8w"
        },
        {
            "introduced": "0.9.8x"
        },
        {
            "last_affected": "0.9.8x"
        },
        {
            "introduced": "0.9.8y"
        },
        {
            "last_affected": "0.9.8y"
        },
        {
            "introduced": "0.9.8z"
        },
        {
            "last_affected": "0.9.8z"
        },
        {
            "introduced": "0.9.8za"
        },
        {
            "last_affected": "0.9.8za"
        },
        {
            "introduced": "0.9.8zb"
        },
        {
            "last_affected": "0.9.8zb"
        },
        {
            "introduced": "0.9.8zc"
        },
        {
            "last_affected": "0.9.8zc"
        },
        {
            "introduced": "0.9.8ze"
        },
        {
            "last_affected": "0.9.8ze"
        },
        {
            "introduced": "0.9.8zg"
        },
        {
            "last_affected": "0.9.8zg"
        },
        {
            "introduced": "0.9.8m-beta1"
        },
        {
            "last_affected": "0.9.8m-beta1"
        },
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "1.0.0a"
        },
        {
            "last_affected": "1.0.0a"
        },
        {
            "introduced": "1.0.0b"
        },
        {
            "last_affected": "1.0.0b"
        },
        {
            "introduced": "1.0.0c"
        },
        {
            "last_affected": "1.0.0c"
        },
        {
            "introduced": "1.0.0d"
        },
        {
            "last_affected": "1.0.0d"
        },
        {
            "introduced": "1.0.0e"
        },
        {
            "last_affected": "1.0.0e"
        },
        {
            "introduced": "1.0.0f"
        },
        {
            "last_affected": "1.0.0f"
        },
        {
            "introduced": "1.0.0g"
        },
        {
            "last_affected": "1.0.0g"
        },
        {
            "introduced": "1.0.0h"
        },
        {
            "last_affected": "1.0.0h"
        },
        {
            "introduced": "1.0.0i"
        },
        {
            "last_affected": "1.0.0i"
        },
        {
            "introduced": "1.0.0j"
        },
        {
            "last_affected": "1.0.0j"
        },
        {
            "introduced": "1.0.0k"
        },
        {
            "last_affected": "1.0.0k"
        },
        {
            "introduced": "1.0.0l"
        },
        {
            "last_affected": "1.0.0l"
        },
        {
            "introduced": "1.0.0m"
        },
        {
            "last_affected": "1.0.0m"
        },
        {
            "introduced": "1.0.0n"
        },
        {
            "last_affected": "1.0.0n"
        },
        {
            "introduced": "1.0.0o"
        },
        {
            "last_affected": "1.0.0o"
        },
        {
            "introduced": "1.0.0p"
        },
        {
            "last_affected": "1.0.0p"
        },
        {
            "introduced": "1.0.0q"
        },
        {
            "last_affected": "1.0.0q"
        },
        {
            "introduced": "1.0.0r"
        },
        {
            "last_affected": "1.0.0r"
        },
        {
            "introduced": "1.0.0s"
        },
        {
            "last_affected": "1.0.0s"
        },
        {
            "introduced": "1.0.0-beta1"
        },
        {
            "last_affected": "1.0.0-beta1"
        },
        {
            "introduced": "1.0.0-beta2"
        },
        {
            "last_affected": "1.0.0-beta2"
        },
        {
            "introduced": "1.0.0-beta3"
        },
        {
            "last_affected": "1.0.0-beta3"
        },
        {
            "introduced": "1.0.0-beta4"
        },
        {
            "last_affected": "1.0.0-beta4"
        },
        {
            "introduced": "1.0.0-beta5"
        },
        {
            "last_affected": "1.0.0-beta5"
        },
        {
            "introduced": "1.0.1"
        },
        {
            "last_affected": "1.0.1"
        },
        {
            "introduced": "1.0.1a"
        },
        {
            "last_affected": "1.0.1a"
        },
        {
            "introduced": "1.0.1b"
        },
        {
            "last_affected": "1.0.1b"
        },
        {
            "introduced": "1.0.1c"
        },
        {
            "last_affected": "1.0.1c"
        },
        {
            "introduced": "1.0.1d"
        },
        {
            "last_affected": "1.0.1d"
        },
        {
            "introduced": "1.0.1e"
        },
        {
            "last_affected": "1.0.1e"
        },
        {
            "introduced": "1.0.1f"
        },
        {
            "last_affected": "1.0.1f"
        },
        {
            "introduced": "1.0.1g"
        },
        {
            "last_affected": "1.0.1g"
        },
        {
            "introduced": "1.0.1h"
        },
        {
            "last_affected": "1.0.1h"
        },
        {
            "introduced": "1.0.1i"
        },
        {
            "last_affected": "1.0.1i"
        },
        {
            "introduced": "1.0.1j"
        },
        {
            "last_affected": "1.0.1j"
        },
        {
            "introduced": "1.0.1k"
        },
        {
            "last_affected": "1.0.1k"
        },
        {
            "introduced": "1.0.1l"
        },
        {
            "last_affected": "1.0.1l"
        },
        {
            "introduced": "1.0.1-beta1"
        },
        {
            "last_affected": "1.0.1-beta1"
        },
        {
            "introduced": "1.0.1-beta2"
        },
        {
            "last_affected": "1.0.1-beta2"
        },
        {
            "introduced": "1.0.1-beta3"
        },
        {
            "last_affected": "1.0.1-beta3"
        },
        {
            "introduced": "1.0.2"
        },
        {
            "last_affected": "1.0.2"
        },
        {
            "introduced": "1.0.2a"
        },
        {
            "last_affected": "1.0.2a"
        },
        {
            "introduced": "1.0.2b"
        },
        {
            "last_affected": "1.0.2b"
        },
        {
            "introduced": "1.0.2c"
        },
        {
            "last_affected": "1.0.2c"
        },
        {
            "introduced": "1.0.2d"
        },
        {
            "last_affected": "1.0.2d"
        },
        {
            "introduced": "1.0.2e"
        },
        {
            "last_affected": "1.0.2e"
        },
        {
            "introduced": "1.0.2f"
        },
        {
            "last_affected": "1.0.2f"
        },
        {
            "introduced": "1.0.2h"
        },
        {
            "last_affected": "1.0.2h"
        },
        {
            "introduced": "1.0.2i"
        },
        {
            "last_affected": "1.0.2i"
        },
        {
            "introduced": "1.0.2j"
        },
        {
            "last_affected": "1.0.2j"
        },
        {
            "introduced": "1.0.2k"
        },
        {
            "last_affected": "1.0.2k"
        },
        {
            "introduced": "1.0.2l"
        },
        {
            "last_affected": "1.0.2l"
        },
        {
            "introduced": "1.0.2-beta1"
        },
        {
            "last_affected": "1.0.2-beta1"
        },
        {
            "introduced": "1.0.2-beta2"
        },
        {
            "last_affected": "1.0.2-beta2"
        },
        {
            "introduced": "1.0.2-beta3"
        },
        {
            "last_affected": "1.0.2-beta3"
        },
        {
            "introduced": "1.1.0"
        },
        {
            "last_affected": "1.1.0"
        },
        {
            "introduced": "1.1.0a"
        },
        {
            "last_affected": "1.1.0a"
        },
        {
            "introduced": "1.1.0b"
        },
        {
            "last_affected": "1.1.0b"
        },
        {
            "introduced": "1.1.0c"
        },
        {
            "last_affected": "1.1.0c"
        },
        {
            "introduced": "1.1.0d"
        },
        {
            "last_affected": "1.1.0d"
        },
        {
            "introduced": "1.1.0e"
        },
        {
            "last_affected": "1.1.0e"
        },
        {
            "introduced": "1.1.0f"
        },
        {
            "last_affected": "1.1.0f"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.9.7j
0.9.8
0.9.8m-beta1
1.*
1.0.0
1.0.0-beta1
1.0.0-beta2
1.0.0-beta3
1.0.0-beta4
1.0.0-beta5
1.0.1
1.0.1-beta1
1.0.1-beta2
1.0.1-beta3
1.0.2
1.0.2-beta1
1.0.2-beta2
1.0.2-beta3
1.1.0

Database specific

vanir_signatures_modified 
"2026-07-08T15:11:26Z"
vanir_signatures 
[
    {
        "target": {
            "function": "X509v3_addr_get_afi",
            "file": "crypto/x509v3/v3_addr.c"
        },
        "id": "CVE-2017-3735-2142274c",
        "digest": {
            "function_hash": "208379985860684619268173937024277364981",
            "length": 257.0
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822"
    },
    {
        "target": {
            "file": "crypto/x509v3/v3_addr.c"
        },
        "id": "CVE-2017-3735-9d266ab3",
        "digest": {
            "line_hashes": [
                "7845397449413559425215778482047677846",
                "207653610646830533992290501458377593330",
                "174509823600981861032748115460464239886",
                "192650640657398900158594109941984932058",
                "211215256581144995289213155903521295219",
                "192968340343454854111328050829945119022",
                "279966053529557468968767575759043715403"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822"
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3735.json"