Unscored DSA-4017-1 2 CVEs

openssl1.0 - security update

Published Nov 3, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	openssl1.0	1.0.2l-2+deb9u1

Vulnerabilities 2

Unscored —

CVE-2017-3735 EPSS 21%

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…

OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine

Aug 28, 2017
Unscored —

CVE-2017-3736 EPSS 10%

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before …

OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine

Nov 2, 2017