CVE-2017-3737

OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "9.0"
                },
                {
                    "last_affected":  "9.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "debian:debian_linux"
        }
    ]
}

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type

GIT

Repo

https://github.com/openssl/openssl

Events

Introduced

e818b74be2170fbe957a07b0da4401c2b694b3b8

Last Affected

e818b74be2170fbe957a07b0da4401c2b694b3b8

Fixed

898fb884b706aaeb283de4812340bb0bde8476dc

Database specific

Show details

{
    "cpe":  [
        "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "1.0.2b"
        },
        {
            "last_affected":  "1.0.2b"
        },
        {
            "introduced":  "1.0.2c"
        },
        {
            "last_affected":  "1.0.2c"
        },
        {
            "introduced":  "1.0.2d"
        },
        {
            "last_affected":  "1.0.2d"
        },
        {
            "introduced":  "1.0.2e"
        },
        {
            "last_affected":  "1.0.2e"
        },
        {
            "introduced":  "1.0.2f"
        },
        {
            "last_affected":  "1.0.2f"
        },
        {
            "introduced":  "1.0.2g"
        },
        {
            "last_affected":  "1.0.2g"
        },
        {
            "introduced":  "1.0.2h"
        },
        {
            "last_affected":  "1.0.2h"
        },
        {
            "introduced":  "1.0.2i"
        },
        {
            "last_affected":  "1.0.2i"
        },
        {
            "introduced":  "1.0.2j"
        },
        {
            "last_affected":  "1.0.2j"
        },
        {
            "introduced":  "1.0.2k"
        },
        {
            "last_affected":  "1.0.2k"
        },
        {
            "introduced":  "1.0.2l"
        },
        {
            "last_affected":  "1.0.2l"
        },
        {
            "introduced":  "1.0.2m"
        },
        {
            "last_affected":  "1.0.2m"
        }
    ],
    "source":  [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

1.*

1.0.2b

Other

OpenSSL_1_0_2u

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3737.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "328360217562015334174612851757298380863",
                "190491506472494106552516757670043108211",
                "217573657763067835266201114262519364526",
                "162502853176602452394369480837555926446"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2017-3737-cb1c25d5",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc",
        "target":  {
            "file":  "ssl/ssl.h"
        }
    }
]

vanir_signatures_modified

"2026-07-08T11:35:52Z"