Description
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL Software Foundation | OpenSSL | 1.1.0, 1.0.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 1.1.0g-1 | — |
| Debian 13 | openssl | 1.1.0g-1 | — |
| Debian 12 | openssl | 1.1.0g-1 | — |
| Debian 9 | openssl | 1.1.0f-3+deb9u1 | DSA-4018-1 |
| Debian 9 | openssl1.0 | 1.0.2l-2+deb9u1 | DSA-4017-1 |
| Debian 8 | openssl | 1.0.1t-1+deb8u7 | DSA-4018-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 7 | openssl | 1.0.1t-1+deb7u3 | DLA-1157-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | openssl | 1.0.2g-1ubuntu14 | — |
| Ubuntu 16.04 LTS | openssl | 1.0.2g-1ubuntu4.9 | USN-3475-1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.23 | USN-3475-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | openssl +4 | 1:1.0.2k-16.el7 | RHSA-2018:3221 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP3 | openssl | 1.0.2j-60.16.1 | SUSE-SU-2017:3169-1 |
| SLES 12 SP2 | openssl | 1.0.2j-60.16.1 | SUSE-SU-2017:3169-1 |
| SLES 12 SP1 | openssl | 1.0.1i-54.8.1 | SUSE-SU-2017:2981-1 |
| SLES 12 | nodejs4 | 4.8.7-15.8.1 | SUSE-SU-2018:0002-1 |
| SLES 12 | nodejs6 | 6.12.2-11.8.1 | SUSE-SU-2018:0293-1 |
| SLES 12 | openssl | 1.0.1i-27.28.1 | SUSE-SU-2018:0112-1 |
| SLES 11 SP4 | MozillaFirefox | 68.2.0-78.51.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | MozillaFirefox-branding-SLED | 68-21.9.8 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-atk | 2.26.1-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-cairo | 1.15.10-2.13.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gdk-pixbuf | 2.36.11-2.8.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-glib2 | 2.54.3-2.14.7 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-gtk3 | 3.10.9-2.15.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-harfbuzz | 1.7.5-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi | 3.2.1.git259-2.3.3 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-libffi-gcc5 | 5.3.1+r233831-14.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | firefox-pango | 1.40.14-2.7.4 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nspr | 4.21-29.6.1 | SUSE-SU-2019:14246-1 |
| SLES 11 SP4 | mozilla-nss | 3.45-38.9.3 | SUSE-SU-2019:14246-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 | openssl1 | 1.0.1g-0.58.3.1 | SUSE-SU-2017:2968-1 |
| SLES for SAP 12 SP3 | openssl | 1.0.2j-60.16.1 | SUSE-SU-2017:3169-1 |
| SLES for SAP 12 SP2 | openssl | 1.0.2j-60.16.1 | SUSE-SU-2017:3169-1 |
| SLES for SAP 12 SP1 | openssl | 1.0.1i-54.8.1 | SUSE-SU-2017:2981-1 |
| SUSE OpenStack Cloud 7 | nodejs6 | 6.12.2-11.8.1 | SUSE-SU-2018:0293-1 |
| SUSE OpenStack Cloud 6 | openssl | 1.0.1i-54.8.1 | SUSE-SU-2017:2981-1 |
| SUSE Enterprise Storage 4 | nodejs4 | 4.8.7-15.8.1 | SUSE-SU-2018:0002-1 |
| SUSE Enterprise Storage 4 | nodejs6 | 6.12.2-11.8.1 | SUSE-SU-2018:0293-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_0_0 | 1.0.2u-6.2 | openSUSE-SU-2024:11126-1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.8 | openssl | 1.0.2m-r0 | — |
| Alpine v3.7 | openssl | 1.0.2m-r0 | — |
| Alpine v3.6 | openssl | 1.0.2m-r0 | — |
| Alpine v3.5 | openssl | 1.0.2m-r0 | — |
| Alpine v3.4 | openssl | 1.0.2m-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.3 | openssl | 1.0.2m-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-16.amzn2.0.1 | ALAS2-2018-1102 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | openssl +4 | 1:1.0.2k-16.0.1.el7 | ELSA-2018-3221 |
Advisories 31
- RHSA-2018:3221 Red Hat Security Advisory: openssl security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- USN-3475-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- DSA-4017-1 openssl1.0 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-4018-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1157-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- SUSE-SU-2018:0112-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:2968-1 Security update for openssl1 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:3169-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2017:2981-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0002-1 Security update for nodejs4 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:0293-1 Security update for nodejs6 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:14246-1 Security update for Mozilla Firefox SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11126-1 libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- ICSA-25-273-04 Festo Controller CECC-S,-LK,-D Family Firmware (Update A) CISA ICS & IT advisories · Nov 13, 2025
- FSA-202202 Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system CERT@VDE · Nov 3, 2025
- WID-SEC-2024-0207 OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Oct 20, 2025
- WID-SEC-2025-1212 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 2, 2025
- VDE-2019-009 PHOENIX CONTACT: Multiple Vulnerabilities in AXC F 2152 CERT@VDE · May 22, 2025
- VDE-2019-001 PHOENIX CONTACT: Multiple Vulnerabilities in FL SWITCH 3xxx, 4xxx and 48xx CERT@VDE · May 14, 2025
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2024-2008 Oracle Virtualization: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 2, 2024
- WID-SEC-2023-1594 IBM Tivoli Network Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 28, 2023
- SSA-412672 SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7 Siemens ProductCERT · Dec 13, 2022
- ICSA-22-349-21 Siemens SCALANCE X-200RNA Switch Devices CISA ICS & IT advisories · Dec 13, 2022
- ICSA-19-155-01 PHOENIX CONTACT PLCNext AXC F 2152 CISA ICS & IT advisories · Jun 4, 2019
- ICSA-19-024-02 PHOENIX CONTACT FL SWITCH CISA ICS & IT advisories · Jan 24, 2019
- ALAS2-2018-1102 Moderate: openssl security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Nov 8, 2018
- ELSA-2018-3221 Moderate: openssl security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 5, 2018
References
- 1039726 vdb-entry
- USN-3611-2 vendor-advisory
- DSA-4018 vendor-advisory
- GLSA-201712-03 vendor-advisory
- [debian-lts-announce] 20171109 [SECURITY] [DLA-1157-1] openssl security update mailing-list
- RHSA-2018:3505 vendor-advisory
- DSA-4017 vendor-advisory
- RHSA-2018:3221 vendor-advisory
- 100515 vdb-entry
- FreeBSD-SA-17:11 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://security.netapp.com/advisory/ntap-20171107-0002/
- https://support.apple.com/HT208331
- https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822
- https://security.netapp.com/advisory/ntap-20170927-0001/
- https://www.tenable.com/security/tns-2017-15
- https://www.openssl.org/news/secadv/20171102.txt
- https://www.tenable.com/security/tns-2017-14
- https://www.openssl.org/news/secadv/20170828.txt
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf