Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: OpenSSL — FreeBSD-SA-17:02 Clear all filters
TI-2017-02849 CVE-2017-3732 · GHSA-5hg3-8gvm-5294

BN_mod_exp may produce incorrect results on x86_64

Priority MEDIUM 42

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.154 Published 2017-05-04 Partial fix CWE-200
TI-2017-02848 CVE-2017-3731 · GHSA-3cp9-4w64-73cg

Truncated packet could crash via OOB read

Priority HIGH 66

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.57322 Published 2017-05-04 Partial fix CWE-125