CVE-2017-3735

原文の説明

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

影響を受けるソフトウェア

• OpenSSL = 1.0.1j= 0.9.8z= 0.9.8a= 0.9.8r= 1.0.0s= 1.0.2k 完全一致

詳細

公開日

2017-08-28

最終更新

2026-06-17

CVSS ベクター

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-119

参考資料

• cve.org/CVE-2017-3735
• nvd.nist.gov/vuln/detail/CVE-2017-3735
• www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
• www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
• www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
• www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• www.securityfocus.com/bid/100515
• www.securitytracker.com/id/1039726
• access.redhat.com/errata/RHSA-2018:3221
• access.redhat.com/errata/RHSA-2018:3505
• cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
• github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822
• lists.debian.org/debian-lts-announce/2017/11/msg00011.html
• security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc