CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread

published August 28, 2017

CVSS
—
EPSS
21%
Percentile
97.5
In the wild
Unconfirmed
What it is

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20968 · 97.5th percentile
Published
2017-08-28T19:00Z
EPSS history
Timeline
  • 28 AUG 19:00Z
    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread
    cvelistv5