CVE-2017-3731

Advisory lineage Upstream: 0 Downstream: 19
Modified
Published: 04 May 2017, 19:00
Last modified:16 Sept 2024, 22:40

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
10.4% MEDIUM
10% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

04 May 2017, 19:00
Published
Vulnerability first disclosed
16 Sept 2024, 22:40
Last Modified
Vulnerability information updated

Description

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 10.40%• Percentile: 93%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • nodejs•node.js

    ≥ 4.0.0, ≤ 4.1.2 | ≥ 4.2.0, < 4.7.3 | ≥ 5.0.0, ≤ 5.12.0 | ≥ 6.0.0, ≤ 6.8.1 | ≥ 6.9.0, < 6.9.5 | ≥ 7.0.0, < 7.5.0

  • Unknown•OpenSSL

    openssl-1.1.0 | openssl-1.1.0a | openssl-1.1.0b | openssl-1.1.0c | openssl-1.0.2 | openssl-1.0.2a | openssl-1.0.2b | openssl-1.0.2c | openssl-1.0.2d | openssl-1.0.2e | openssl-1.0.2f | openssl-1.0.2g | openssl-1.0.2h | openssl-1.0.2i | openssl-1.0.2j | 1.1.0a | 1.1.0b | 1.1.0c | 1.0.2 | 1.0.2:beta1 | 1.0.2:beta2 | 1.0.2:beta3 | 1.0.2a | 1.0.2b | 1.0.2c | 1.0.2d | 1.0.2e | 1.0.2f | 1.0.2h | 1.0.2i | 1.0.2j

References (20)