Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: OpenSSL — GLSA-201702-07 Clear all filters
TI-2017-02849 CVE-2017-3732 · GHSA-5hg3-8gvm-5294

BN_mod_exp may produce incorrect results on x86_64

Priority MEDIUM 42

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.154 Published 2017-05-04 Partial fix CWE-200
TI-2017-02848 CVE-2017-3731 · GHSA-3cp9-4w64-73cg

Truncated packet could crash via OOB read

Priority HIGH 66

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.57322 Published 2017-05-04 Partial fix CWE-125
TI-2017-02847 CVE-2017-3730 · GHSA-rq64-8m54-26j4

Bad (EC)DHE parameters cause a client crash

Priority HIGH 66

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.55294 Published 2017-05-04 No fix listed CWE-476