Skip to content
OpenAdvisories
Unscored RHSA-2017:0286 2 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client openssl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-debuginfo 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-devel 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-perl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::client openssl-static 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-debuginfo 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-devel 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-perl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::computenode openssl-static 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-debuginfo 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-devel 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-perl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::server openssl-static 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-debuginfo 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-devel 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-perl 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 6 enterprise_linux:6::workstation openssl-static 0:1.0.1e-48.el6_8.4
Red Hat · RHEL 7 enterprise_linux:7::client openssl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-debuginfo 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-devel 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-libs 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-perl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::client openssl-static 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-debuginfo 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-devel 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-libs 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-perl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::computenode openssl-static 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-debuginfo 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-devel 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-libs 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-perl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::server openssl-static 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-debuginfo 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-devel 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-libs 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-perl 1:1.0.1e-60.el7_3.1
Red Hat · RHEL 7 enterprise_linux:7::workstation openssl-static 1:1.0.1e-60.el7_3.1

Vulnerabilities 2

  • Unscored —
    CVE-2016-8610 Public exploit EPSS 40%

    A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL prot…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2017-3731 EPSS 57%

    Truncated packet could crash via OOB read

    If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be trigge…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://www.openssl.org/news/secadv/20170126.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1384743
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1416852
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0286.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-8610
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8610
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8610
  • article
    http://security.360.cn/cve/CVE-2016-8610
  • report
    https://access.redhat.com/security/cve/CVE-2017-3731
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-3731
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-3731