OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2017-3735 EPSS 21%

  While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…

  OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Alpine
  Aug 28, 2017

Revision history

1. 2025-10-20 #29

   Neue Updates aufgenommen

2. 2024-01-25 #28

   Neue Updates von Dell aufgenommen

3. 2020-01-08 #27

   Neue Updates von Juniper aufgenommen

4. 2019-03-13 #26

   Neue Updates von Oracle Linux aufgenommen

5. 2018-11-06 #25

   New remediations available

6. 2018-11-05 #24

   New remediations available

7. 2018-10-30 #23

   New remediations available

8. 2018-04-12 #21

   New remediations available

9. 2018-04-12 #22

   Version nicht vorhanden

10. 2018-01-30 #20

    New remediations available

11. 2018-01-16 #19

    New remediations available

12. 2018-01-02 #18

    New remediations available

13. 2017-12-14 #17

    Added references

14. 2017-12-07 #16

    New remediations available

15. 2017-12-05 #15

    New remediations available

16. 2017-11-30 #14

    New remediations available

17. 2017-11-14 #13

    Added references

18. 2017-11-13 #12

    Added references

19. 2017-11-09 #11

    New remediations available

20. 2017-11-06 #10

    New remediations available

21. 2017-11-05 #9

    New remediations available

22. 2017-11-02 #7

    New remediations available

23. 2017-11-02 #8

    Version nicht vorhanden

24. 2017-10-15 #6

    New remediations available

25. 2017-10-03 #4

    New remediations available

References

• OpenSSL Security Advisory vom 2017-08-29
  https://www.openssl.org/news/secadv/20170828.txt
• NetApp Advisory Number NTAP-20170927-0001 vom 2017-10-03
  https://kb.netapp.com/support/s/article/ka51A000000CgytQAC/NTAP-20170927-0001?language=en_US
• F5 Security Advisory K21462542 vom 2017-10-13
  https://support.f5.com/csp/article/K21462542
• OpenSSL Security Advisory vom 2017-11-02
  https://www.openssl.org/news/secadv/20171102.txt
• Debian Security Advisory DSA-4018 vom 2017-11-04
  https://www.debian.org/security/2017/dsa-4018
• Debian Security Advisory DSA-4017 vom 2017-11-04
  https://www.debian.org/security/2017/dsa-4017
• Ubuntu Security Notice USN-3475-1 vom 2017-11-06
  http://www.ubuntu.com/usn/usn-3475-1/
• NetApp Security Advisory ID: NTAP-20170927-0001 vom 2017-11-13
  https://security.netapp.com/advisory/ntap-20170927-0001/
• FreeBSD Security Advisory FREEBSD-SA-17:11.OPENSSL vom 2017-11-29
  https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc
• SUSE Security Update SUSE-SU-2017:3169-1 vom 2017-12-01
  https://www.suse.com/support/update/announcement/2017/suse-su-20173169-1.html
• NetApp Security Advisory NTAP-20171107-0002 vom 2017-12-05
  https://security.netapp.com/advisory/ntap-20171107-0002/
• Tenable Security Advisory ID: TNS-2017-15
  https://www.tenable.com/security/tns-2017-15
• McAfee Security Bulletin: SB10220
  https://kc.mcafee.com/corporate/index?page=content&id=SB10220
• SUSE Security Update SUSE-SU-2018:0002-1 vom 2018-01-02
  https://www.suse.com/support/update/announcement/2018/suse-su-20180002-1.html
• SUSE Security Update SUSE-SU-2018:0112-1 vom 2018-01-16
  https://www.suse.com/support/update/announcement/2018/suse-su-20180112-1.html
• SUSE Security Update SUSE-SU-2018:0293-1 vom 2018-01-30
  https://www.suse.com/support/update/announcement/2018/suse-su-20180293-1.html
• Juniper Security Advisory JSA10851 vom 2018-04-12
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10851
• Red Hat Security Advisory RHSA-2018:3221 vom 2018-10-31
  https://access.redhat.com/errata/RHSA-2018:3221
• Oracle Linux Security Advisory ELSA-2018-3221 vom 2018-11-06
  http://linux.oracle.com/errata/ELSA-2018-3221.html
• Oracle Linux Security Advisory ELSA-2018-4267 vom 2018-11-07
  http://linux.oracle.com/errata/ELSA-2018-4267.html
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Juniper Security Advisory JSA10990 vom 2020-01-08
  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10990&actp=RSS
• Dell Knowledge Base Article
  https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities
• SolarWinds Platform 2025.4 release notes vom 2025-10-21
  https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-4_release_notes.htm