MEDIUM 5.3 Microsoft

CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

Microsoft Security Update 2017-Aug: While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

Affected Products

References

Published: 2017-08-08 · Source: Microsoft · Feed updated: 2026-08-24
This medium severity vulnerability with a CVSS score of 5.3 was published on 2017-08-08 via Microsoft. EPSS score: 20.6% (top 3% of all CVEs by exploitation probability). Affected: azl3 shim-unsigned-x64 16.1-1 on Azure Linux 3.0, cbl2 shim-unsigned-aarch64 15-5 on CBL Mariner 2.0, cbl2 shim-unsigned-x64 15.8-1 on CBL Mariner 2.0 and 5 more.
vulnfeed aggregates 11255 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.