OpenSSL: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2017-3736 EPSS 10%

  There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before …

  OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine
  Nov 2, 2017

Revision history

1. 2025-10-20 #29

   Neue Updates aufgenommen

2. 2024-06-03 #28

   Neue Updates aufgenommen

3. 2024-01-25 #27

   Neue Updates von Dell aufgenommen

4. 2019-03-13 #26

   Neue Updates von Oracle Linux aufgenommen

5. 2018-09-24 #25

   New remediations available

6. 2018-08-27 #24

   New remediations available

7. 2018-08-07 #20

   New remediations available

8. 2018-08-07 #21

   Version nicht vorhanden

9. 2018-08-07 #22

   Version nicht vorhanden

10. 2018-08-07 #23

    Version nicht vorhanden

11. 2018-07-12 #19

    New remediations available

12. 2018-04-18 #18

    New remediations available

13. 2018-04-12 #16

    New remediations available

14. 2018-04-12 #17

    Version nicht vorhanden

15. 2018-01-30 #15

    New remediations available

16. 2018-01-02 #13

    New remediations available

17. 2018-01-02 #14

    Version nicht vorhanden

18. 2017-12-21 #12

    New remediations available

19. 2017-12-14 #11

    Added references

20. 2017-12-07 #10

    New remediations available

21. 2017-11-30 #9

    New remediations available

22. 2017-11-14 #8

    Added references

23. 2017-11-13 #6

    Added references

24. 2017-11-13 #7

    Version nicht vorhanden

25. 2017-11-06 #4

    New remediations available

References

• OpenSSL Security Advisory vom 2017-11-02
  https://www.openssl.org/news/secadv/20171102.txt
• Debian Security Advisory DSA-4018 vom 2017-11-04
  https://www.debian.org/security/2017/dsa-4018
• Debian Security Advisory DSA-4017 vom 2017-11-04
  https://www.debian.org/security/2017/dsa-4017
• Ubuntu Security Notice USN-3475-1 vom 2017-11-06
  http://www.ubuntu.com/usn/usn-3475-1/
• NetAPP Security Advisory NTAP-20171107-0002 vom 2017-11-08
  https://security.netapp.com/advisory/ntap-20171107-0002/
• FreeBSD Security Advisory FREEBSD-SA-17:11.OPENSSL vom 2017-11-29
  https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc
• SUSE Security Update SUSE-SU-2017:3169-1 vom 2017-12-01
  https://www.suse.com/support/update/announcement/2017/suse-su-20173169-1.html
• Tenable Security Advisory ID: TNS-2017-15
  https://www.tenable.com/security/tns-2017-15
• SUSE Security Update SUSE-SU-2017:3343-1 vom 2017-12-16
  https://www.suse.com/support/update/announcement/2017/suse-su-20173343-1.html
• F5 Security Advisory K14363514 vom 2017-12-15
  https://support.f5.com/csp/article/K14363514
• McAfee Security Bulletin: SB10220
  https://kc.mcafee.com/corporate/index?page=content&id=SB10220
• SUSE Security Update SUSE-SU-2018:0002-1 vom 2018-01-02
  https://www.suse.com/support/update/announcement/2018/suse-su-20180002-1.html
• SUSE Security Update SUSE-SU-2018:0293-1 vom 2018-01-30
  https://www.suse.com/support/update/announcement/2018/suse-su-20180293-1.html
• Juniper Security Advisory JSA10851 vom 2018-04-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10851
• Oracle Linux Security Advisory ELSA-2018-4077 vom 2018-04-19
  http://linux.oracle.com/errata/ELSA-2018-4077.html
• Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13
  https://access.redhat.com/errata/RHSA-2018:2185
• Hitachi Security Information hitachi-sec-2018-124
  http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2018-124/index.html
• Red Hat Security Advisory RHSA-2018:2568 vom 2018-08-27
  http://rhn.redhat.com/errata/RHSA-2018-2568.html
• SUSE Security Update SUSE-SU-2018:2839-1 vom 2018-09-24
  https://www.suse.com/support/update/announcement/2018/suse-su-20182839-1.html
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Dell Knowledge Base Article
  https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities
• SolarWinds Platform 2024.2 release notes vom 2024-06-04
  https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm
• SolarWinds Platform 2025.4 release notes vom 2025-10-21
  https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-4_release_notes.htm