Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Thi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
openssl

Description

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenSSL Software Foundation OpenSSL

  • 1.1.0affected
  • 1.0.2affected

References