CVE-2017-3737

OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSLdohandshake(), SSLaccept() and SSLconnect()), however due to a bug it does not work correctly if SSLread() or SSLwrite() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSLread()/SSLwrite() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSLread()/SSLwrite() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type

GIT

Repo

https://github.com/openssl/openssl

Events

Introduced

e818b74be2170fbe957a07b0da4401c2b694b3b8

Last affected

e818b74be2170fbe957a07b0da4401c2b694b3b8

Fixed

898fb884b706aaeb283de4812340bb0bde8476dc

Database specific

{
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": [
        "cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*",
        "cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.0.2b"
        },
        {
            "last_affected": "1.0.2b"
        },
        {
            "introduced": "1.0.2c"
        },
        {
            "last_affected": "1.0.2c"
        },
        {
            "introduced": "1.0.2d"
        },
        {
            "last_affected": "1.0.2d"
        },
        {
            "introduced": "1.0.2e"
        },
        {
            "last_affected": "1.0.2e"
        },
        {
            "introduced": "1.0.2f"
        },
        {
            "last_affected": "1.0.2f"
        },
        {
            "introduced": "1.0.2g"
        },
        {
            "last_affected": "1.0.2g"
        },
        {
            "introduced": "1.0.2h"
        },
        {
            "last_affected": "1.0.2h"
        },
        {
            "introduced": "1.0.2i"
        },
        {
            "last_affected": "1.0.2i"
        },
        {
            "introduced": "1.0.2j"
        },
        {
            "last_affected": "1.0.2j"
        },
        {
            "introduced": "1.0.2k"
        },
        {
            "last_affected": "1.0.2k"
        },
        {
            "introduced": "1.0.2l"
        },
        {
            "last_affected": "1.0.2l"
        },
        {
            "introduced": "1.0.2m"
        },
        {
            "last_affected": "1.0.2m"
        }
    ]
}

Affected versions

1.*

1.0.2b

Other

OpenSSL_1_0_2u

Database specific

vanir_signatures_modified

"2026-07-08T11:35:52Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3737.json"

vanir_signatures

[
    {
        "id": "CVE-2017-3737-cb1c25d5",
        "digest": {
            "line_hashes": [
                "328360217562015334174612851757298380863",
                "190491506472494106552516757670043108211",
                "217573657763067835266201114262519364526",
                "162502853176602452394369480837555926446"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/openssl/openssl/commit/898fb884b706aaeb283de4812340bb0bde8476dc",
        "deprecated": false,
        "target": {
            "file": "ssl/ssl.h"
        }
    }
]