CVE-2017-1000385: debian debian_linux Observable Discrepancy

CVSS: 5.9v3.0MediumModified

AliasesMGASA-2018-0060SUSE-SU-2018:0974-1RHBA-2019:0453+8 more

Published 12-12-2017Last modified 05-08-2024

Vulnerability summary

CVE-2017-1000385 is a medium (CVSS 5.9) Observable Discrepancy vulnerability in debian debian_linux. EPSS estimates a 22.10% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

38/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.9/10

010

Medium · v3.0 (NVD)

EPSS score

22.10%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1metasploit

Advisory lineage

Upstream 0 · Downstream 3 · Related 3

OPENSUSE-SU-2017:3255-1 OPENSUSE-SU-2017:3257-1 USN-3571-1

Timeline

12-12-2017
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).

CVSS metrics

5 scores · 4 sources · 2 versions

v3.05.9v2.04.3

EPSS trend

Probability

22.10%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 22.10% on 18-09-2026

18-09-202618-10-2026

EPSS score

22.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

MetasploitremoteUnverified
Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5
auxiliary/scanner/ssl/bleichenbacher_oracle
Maturity: poc

Weaknesses

CWE · root cause

CWE-203Observable DiscrepancyThe product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

Affected systems

Redhat67 products

ansible-tower< 0:3.4.1-2.el7at
ansible-tower-server< 0:3.4.1-2.el7at
ansible-tower-setup< 0:3.4.1-2.el7at
ansible-tower-ui< 0:3.4.1-2.el7at
ansible-tower-venv-ansible< 0:3.4.1-2.el7at

ansible-tower-venv-tower< 0:3.4.1-2.el7at
cfme< 0:5.10.1.2-2.el7cf
cfme-amazon-smartstate< 0:5.10.1.2-1.el7cf
cfme-appliance< 0:5.10.1.2-1.el7cf
cfme-appliance-common< 0:5.10.1.2-1.el7cf
cfme-appliance-debuginfo< 0:5.10.1.2-1.el7cf
cfme-appliance-tools< 0:5.10.1.2-1.el7cf
cfme-debuginfo< 0:5.10.1.2-2.el7cf
cfme-gemset< 0:5.10.1.2-1.el7cf
cfme-gemset-debuginfo< 0:5.10.1.2-1.el7cf
erlang< 0:20.3.8.9-2.el7at | < 0:18.3.4.7-1.el7ost
erlang-asn1< 0:18.3.4.7-1.el7ost
erlang-compiler< 0:18.3.4.7-1.el7ost
erlang-cosEvent< 0:18.3.4.7-1.el7ost
erlang-cosEventDomain< 0:18.3.4.7-1.el7ost
erlang-cosFileTransfer< 0:18.3.4.7-1.el7ost
erlang-cosNotification< 0:18.3.4.7-1.el7ost
erlang-cosProperty< 0:18.3.4.7-1.el7ost
erlang-cosTime< 0:18.3.4.7-1.el7ost
erlang-cosTransactions< 0:18.3.4.7-1.el7ost
erlang-crypto< 0:18.3.4.7-1.el7ost
erlang-debuginfo< 0:20.3.8.9-2.el7at | < 0:18.3.4.7-1.el7ost
erlang-diameter< 0:18.3.4.7-1.el7ost
erlang-edoc< 0:18.3.4.7-1.el7ost
erlang-eldap< 0:18.3.4.7-1.el7ost
erlang-erl_docgen< 0:18.3.4.7-1.el7ost
erlang-erl_interface< 0:18.3.4.7-1.el7ost
erlang-erts< 0:18.3.4.7-1.el7ost
erlang-eunit< 0:18.3.4.7-1.el7ost
erlang-hipe< 0:18.3.4.7-1.el7ost
erlang-ic< 0:18.3.4.7-1.el7ost
erlang-inets< 0:18.3.4.7-1.el7ost
erlang-kernel< 0:18.3.4.7-1.el7ost
erlang-mnesia< 0:18.3.4.7-1.el7ost
erlang-odbc< 0:18.3.4.7-1.el7ost
erlang-orber< 0:18.3.4.7-1.el7ost
erlang-os_mon< 0:18.3.4.7-1.el7ost
erlang-ose< 0:18.3.4.7-1.el7ost
erlang-otp_mibs< 0:18.3.4.7-1.el7ost
erlang-parsetools< 0:18.3.4.7-1.el7ost
erlang-percept< 0:18.3.4.7-1.el7ost
erlang-public_key< 0:18.3.4.7-1.el7ost
erlang-runtime_tools< 0:18.3.4.7-1.el7ost
erlang-sasl< 0:18.3.4.7-1.el7ost
erlang-snmp< 0:18.3.4.7-1.el7ost
erlang-ssh< 0:18.3.4.7-1.el7ost
erlang-ssl< 0:18.3.4.7-1.el7ost
erlang-stdlib< 0:18.3.4.7-1.el7ost
erlang-syntax_tools< 0:18.3.4.7-1.el7ost
erlang-tools< 0:18.3.4.7-1.el7ost
erlang-xmerl< 0:18.3.4.7-1.el7ost
nginx< 1:1.14.1-1.el7at
nginx-all-modules< 1:1.14.1-1.el7at
nginx-debuginfo< 1:1.14.1-1.el7at
nginx-filesystem< 1:1.14.1-1.el7at
nginx-mod-http-geoip< 1:1.14.1-1.el7at
nginx-mod-http-image-filter< 1:1.14.1-1.el7at
nginx-mod-http-perl< 1:1.14.1-1.el7at
nginx-mod-http-xslt-filter< 1:1.14.1-1.el7at
nginx-mod-mail< 1:1.14.1-1.el7at
nginx-mod-stream< 1:1.14.1-1.el7at
rabbitmq-server< 0:3.7.4-2.el7at

Show all 67

Debian2 products

erlang< 1:20.1.7+dfsg-1 | < 1:17.3-dfsg-4+deb8u2 | < 1:19.2.1+dfsg-2+deb9u1 | < 1:15.b.1-dfsg-4+deb7u2
debian_linuxEOL8.0 | 9.0

Suse2 products

erlang&distro=SUSE Enterprise Storage 4< 17.5.6-3.3.1
erlang&distro=SUSE OpenStack Cloud 7< 17.5.6-3.3.1

Erlang1 product

erlang\/otpEOL18.3.4.7 | 19.3.6.4 | 20.1.7

Mageia1 product

erlang< 18.3.2-9.1.mga6

Ubuntu1 product

erlang< 1:16.b.3-dfsg-1ubuntu2.2 | < 1:18.3-dfsg-1ubuntu3.1

6 vendors · 74 products

References

69 links

usn.ubuntu.com/3571-1/Vendor AdvisoryX Refsource UBUNTU
access.redhat.com/errata/RHSA-2018:0528Vendor AdvisoryX Refsource REDHATAdvisory
erlang.org/pipermail/erlang-questions/2017-November/094257.htmlMailing ListX Refsource MLISTIssue TrackingVendor Advisory
lists.debian.org/debian-lts-announce/2017/12/msg00010.htmlMailing ListX Refsource MLIST
access.redhat.com/errata/RHSA-2018:0242Vendor AdvisoryX Refsource REDHATAdvisory
robotattack.orgX Refsource MISCIssue TrackingThird Party Advisory
erlang.org/pipermail/erlang-questions/2017-November/094256.htmlMailing ListX Refsource MLISTIssue TrackingVendor Advisory
www.debian.org/security/2017/dsa-4057Vendor AdvisoryX Refsource DEBIANIssue TrackingThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2018:0368Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2018:0303Vendor AdvisoryX Refsource REDHATAdvisory

Show all 69 references

erlang.org/pipermail/erlang-questions/2017-November/094255.htmlMailing ListX Refsource MLISTIssue TrackingVendor Advisory
www.securityfocus.com/bid/102197VDB EntryX Refsource BIDThird Party Advisory
www.kb.cert.org/vuls/id/144389Third Party AdvisoryX Refsource CERT VNIssue TrackingUS Government Resource
advisories.mageia.org/MGASA-2018-0060.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=22145REPORT
www.suse.com/support/update/announcement/2018/suse-su-20180974-1/Advisory
bugzilla.suse.com/1070960REPORT
www.suse.com/security/cve/CVE-2017-1000385WEB
access.redhat.com/errata/RHBA-2019:0453Advisory
access.redhat.com/documentation/en-us/red_hat_cloudforms/4.7/html/release_notesARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1669269REPORT
bugzilla.redhat.com/show_bug.cgi?id=1669582REPORT
bugzilla.redhat.com/show_bug.cgi?id=1669626REPORT
bugzilla.redhat.com/show_bug.cgi?id=1670200REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672690REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672691REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672693REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672694REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672695REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672696REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672697REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672698REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672699REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672700REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672702REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672703REPORT
bugzilla.redhat.com/show_bug.cgi?id=1672704REPORT
bugzilla.redhat.com/show_bug.cgi?id=1673039REPORT
bugzilla.redhat.com/show_bug.cgi?id=1673199REPORT
bugzilla.redhat.com/show_bug.cgi?id=1673747REPORT
bugzilla.redhat.com/show_bug.cgi?id=1673748REPORT
bugzilla.redhat.com/show_bug.cgi?id=1674585REPORT
bugzilla.redhat.com/show_bug.cgi?id=1674673REPORT
bugzilla.redhat.com/show_bug.cgi?id=1676555REPORT
bugzilla.redhat.com/show_bug.cgi?id=1676556REPORT
bugzilla.redhat.com/show_bug.cgi?id=1677409REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678340REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678360REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678368REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678376REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678449REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678450REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678489REPORT
bugzilla.redhat.com/show_bug.cgi?id=1678614REPORT
security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_0453.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-1000385REPORT
bugzilla.redhat.com/show_bug.cgi?id=1520400REPORT
www.cve.org/CVERecord?id=CVE-2017-1000385AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-1000385Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0242.jsonAdvisory
bugzilla.redhat.com/show_bug.cgi?id=1536064REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0303.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0368.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0528.jsonAdvisory
ubuntu.com/security/CVE-2017-1000385REPORT
groups.google.com/forum/REPORT
ubuntu.com/security/notices/USN-3571-1Advisory
security-tracker.debian.org/tracker/CVE-2017-1000385Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities