CVE-2017-3731

high · 7.5

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.

7.5

CVSS

57.6%

EPSS (exploit prob.)

99th

EPSS percentile

2017-05-04

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-125

Affected products

Vendor	Product	Affected versions
openssl	openssl	1.1.0a
openssl	openssl	1.1.0b
openssl	openssl	1.1.0c
openssl	openssl	1.0.2
openssl	openssl	1.0.2
openssl	openssl	1.0.2
openssl	openssl	1.0.2
openssl	openssl	1.0.2a
openssl	openssl	1.0.2b
openssl	openssl	1.0.2c
openssl	openssl	1.0.2d
openssl	openssl	1.0.2e
openssl	openssl	1.0.2f
openssl	openssl	1.0.2h
openssl	openssl	1.0.2i
openssl	openssl	1.0.2j
nodejs	node.js	>= 4.0.0, <= 4.1.2
nodejs	node.js	>= 4.2.0, < 4.7.3
nodejs	node.js	>= 5.0.0, <= 5.12.0
nodejs	node.js	>= 6.0.0, <= 6.8.1
nodejs	node.js	>= 6.9.0, < 6.9.5
nodejs	node.js	>= 7.0.0, < 7.5.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-3731