SUSE-SU-2017:3169-1: openssl&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:3169-1 is a vulnerability in openssl&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 30-11-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for openssl This update for openssl fixes the following issues: Security issues fixed: - CVE-2017-3735: openssl1,openssl: Malformed X.509 IPAdressFamily could cause OOB read (bsc#1056058) - CVE-2017-3736: openssl: bn_sqrx8x_internal carry bug on x86_64 (bsc#1066242) - Out of bounds read+crash in DES_fcrypt (bsc#1065363) - openssl DEFAULT_SUSE cipher list is missing ECDHE-ECDSA ciphers (bsc#1055825)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse9 products
- openssl&distro=SUSE Linux Enterprise Desktop 12 SP2< 1.0.2j-60.16.1
- openssl&distro=SUSE Linux Enterprise Desktop 12 SP3< 1.0.2j-60.16.1
- openssl&distro=SUSE Linux Enterprise Server 12 SP2< 1.0.2j-60.16.1
- openssl&distro=SUSE Linux Enterprise Server 12 SP3< 1.0.2j-60.16.1
- openssl&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 1.0.2j-60.16.1
1 vendor · 9 products