OpenSSL: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2017-3737 EPSS 79%

  OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal erro…

  OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine
  Dec 7, 2017
• Unscored —
  CVE-2017-3738 EPSS 13%

  There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. N…

  OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine
  Dec 7, 2017

Revision history

1. 2025-10-20 #20

   Neue Updates aufgenommen

2. 2024-01-25 #19

   Neue Updates von Dell aufgenommen

3. 2019-03-13 #18

   Neue Updates von Oracle Linux aufgenommen

4. 2018-08-07 #16

   New remediations available

5. 2018-08-07 #17

   Version nicht vorhanden

6. 2018-07-12 #15

   New remediations available

7. 2018-07-11 #14

   New remediations available

8. 2018-04-18 #13

   New remediations available

9. 2018-04-12 #11

   New remediations available

10. 2018-04-12 #12

    Version nicht vorhanden

11. 2018-04-02 #10

    New remediations available

12. 2018-01-30 #8

    New remediations available

13. 2018-01-30 #9

    Version nicht vorhanden

14. 2018-01-02 #6

    New remediations available

15. 2018-01-02 #7

    Version nicht vorhanden

16. 2017-12-14 #5

    Added references

17. 2017-12-11 #4

    New remediations available

18. 2017-12-10 #3

    New remediations available

19. 2017-12-07 #1

    Initial Release

20. 2017-12-07 #2

    Version nicht vorhanden

References

• OpenSSL Security Advisory vom 2017-12-07
  https://www.openssl.org/news/secadv/20171207.txt
• NetApp Security Advisory NTAP-20171208-0001 vom 2017-12-09
  https://security.netapp.com/advisory/ntap-20171208-0001/
• FreeBSD Security Advisory FREEBSD-SA-17:12.OPENSSL vom 2017-12-09
  https://security.FreeBSD.org/advisories/FreeBSD-SA-17:12.openssl.asc
• Ubuntu Security Notice USN-3512-1 vom 2017-12-12
  http://www.ubuntu.com/usn/usn-3512-1/
• SUSE Security Update SUSE-SU-2017:3343-1 vom 2017-12-16
  https://www.suse.com/support/update/announcement/2017/suse-su-20173343-1.html
• Debian Security Advisory DSA-4065 vom 2017-12-17
  https://www.debian.org/security/2017/dsa-4065
• SUSE Security Update SUSE-SU-2018:0002-1 vom 2018-01-02
  https://www.suse.com/support/update/announcement/2018/suse-su-20180002-1.html
• SUSE Security Update SUSE-SU-2018:0293-1 vom 2018-01-30
  https://www.suse.com/support/update/announcement/2018/suse-su-20180293-1.html
• OpenSSL Security Advisory vom 2018-03-27
  https://www.openssl.org/news/secadv/20180327.txt
• Debian Security Advisory DSA-4157 vom 2018-03-30
  https://www.debian.org/security/2018/dsa-4157
• Juniper Security Advisory JSA10851 vom 2018-04-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10851
• Oracle Linux Security Advisory ELSA-2018-4077 vom 2018-04-19
  http://linux.oracle.com/errata/ELSA-2018-4077.html
• McAfee Security Bulletin
  https://kc.mcafee.com/corporate/index?page=content&id=SB10220
• Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13
  https://access.redhat.com/errata/RHSA-2018:2185
• Hitachi Security Information hitachi-sec-2018-124
  http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-124/index.html
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Dell Knowledge Base Article
  https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities
• SolarWinds Platform 2025.4 release notes vom 2025-10-21
  https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-4_release_notes.htm