NVD Vulnerability Detail

CVE-2017-3735

Summary	While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Publication Date	Aug. 29, 2017, 4:29 a.m.
Registration Date	Jan. 26, 2021, 1:23 p.m.
Last Update	Nov. 21, 2024, 12:26 p.m.

CVSS3.0 : MEDIUM
スコア	5.3
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	低
可用性への影響(A)	なし

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	低
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.1.0e:::::::*
cpe:2.3:a:openssl:openssl:0.9.8ze:::::::*
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:0.9.8b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:0.9.7l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:::::::*
cpe:2.3:a:openssl:openssl:1.1.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8n:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8p:::::::*
cpe:2.3:a:openssl:openssl:1.0.2e:::::::*
cpe:2.3:a:openssl:openssl:1.0.2j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:0.9.7j:::::::*
cpe:2.3:a:openssl:openssl:0.9.8e:::::::*
cpe:2.3:a:openssl:openssl:0.9.8u:::::::*
cpe:2.3:a:openssl:openssl:0.9.8za:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:0.9.8g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.8d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8j:::::::*
cpe:2.3:a:openssl:openssl:1.1.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:0.9.7k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:0.9.8s:::::::*
cpe:2.3:a:openssl:openssl:1.0.0p:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.0s:::::::*
cpe:2.3:a:openssl:openssl:1.0.2h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0o:::::::*
cpe:2.3:a:openssl:openssl:0.9.8l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8zc:::::::*
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8r:::::::*
cpe:2.3:a:openssl:openssl:1.0.2c:::::::*
cpe:2.3:a:openssl:openssl:0.9.8t:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:0.9.8z:::::::*
cpe:2.3:a:openssl:openssl:1.1.0b:::::::*
cpe:2.3:a:openssl:openssl:1.1.0d:::::::*
cpe:2.3:a:openssl:openssl:0.9.8a:::::::*
cpe:2.3:a:openssl:openssl:1.1.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:0.9.7m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.1.0a:::::::*
cpe:2.3:a:openssl:openssl:0.9.8zb:::::::*
cpe:2.3:a:openssl:openssl:0.9.8o:::::::*
cpe:2.3:a:openssl:openssl:0.9.8q:::::::*
cpe:2.3:a:openssl:openssl:0.9.8w:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8v:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl:1.0.0r:::::::*
cpe:2.3:a:openssl:openssl:0.9.8i:::::::*
cpe:2.3:a:openssl:openssl:0.9.8f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8y:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0q:::::::*
cpe:2.3:a:openssl:openssl:0.9.8h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8zg:::::::*
cpe:2.3:a:openssl:openssl:1.0.2f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8x:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.2i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*
cpe:2.3:a:openssl:openssl:1.0.2d:::::::*
cpe:2.3:a:openssl:openssl:1.0.2k:::::::*
cpe:2.3:a:openssl:openssl:1.0.2l:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:8.0:::::::*
cpe:2.3:o:debian:debian_linux:9.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
2	http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
3	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
4	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
5	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
6	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
7	http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
8	http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
9	http://www.securityfocus.com/bid/100515	Third Party Advisory VDB Entry
10	http://www.securityfocus.com/bid/100515	Third Party Advisory VDB Entry
11	http://www.securitytracker.com/id/1039726	Third Party Advisory VDB Entry
12	http://www.securitytracker.com/id/1039726	Third Party Advisory VDB Entry
13	https://access.redhat.com/errata/RHSA-2018:3221
14	https://access.redhat.com/errata/RHSA-2018:3221
15	https://access.redhat.com/errata/RHSA-2018:3505
16	https://access.redhat.com/errata/RHSA-2018:3505
17	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
18	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
19	https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822
20	https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822
21	https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html
22	https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html
23	https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc
24	https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc
25	https://security.gentoo.org/glsa/201712-03
26	https://security.gentoo.org/glsa/201712-03
27	https://security.netapp.com/advisory/ntap-20170927-0001/	Issue Tracking Third Party Advisory
28	https://security.netapp.com/advisory/ntap-20170927-0001/	Issue Tracking Third Party Advisory
29	https://security.netapp.com/advisory/ntap-20171107-0002/	Issue Tracking Third Party Advisory
30	https://security.netapp.com/advisory/ntap-20171107-0002/	Issue Tracking Third Party Advisory
31	https://support.apple.com/HT208331
32	https://support.apple.com/HT208331
33	https://usn.ubuntu.com/3611-2/
34	https://usn.ubuntu.com/3611-2/
35	https://www.debian.org/security/2017/dsa-4017	Third Party Advisory
36	https://www.debian.org/security/2017/dsa-4017	Third Party Advisory
37	https://www.debian.org/security/2017/dsa-4018	Third Party Advisory
38	https://www.debian.org/security/2017/dsa-4018	Third Party Advisory
39	https://www.openssl.org/news/secadv/20170828.txt	Patch Vendor Advisory
40	https://www.openssl.org/news/secadv/20170828.txt	Patch Vendor Advisory
41	https://www.openssl.org/news/secadv/20171102.txt	Issue Tracking Vendor Advisory
42	https://www.openssl.org/news/secadv/20171102.txt	Issue Tracking Vendor Advisory
43	https://www.oracle.com//security-alerts/cpujul2021.html
44	https://www.oracle.com//security-alerts/cpujul2021.html
45	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
46	https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
47	https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
48	https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
49	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
50	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
51	https://www.tenable.com/security/tns-2017-14	Issue Tracking Third Party Advisory
52	https://www.tenable.com/security/tns-2017-14	Issue Tracking Third Party Advisory
53	https://www.tenable.com/security/tns-2017-15
54	https://www.tenable.com/security/tns-2017-15

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

OpenSSL における証明書のテキストが不正に表示される脆弱性

Title	OpenSSL における証明書のテキストが不正に表示される脆弱性
Summary	OpenSSL は、X.509 証明書の IPAddressFamily 拡張の構文解析の際、1 バイトオーバーリードするため、証明書のテキストが不正に表示される脆弱性が存在します。
Possible impacts	証明書のテキストが不正に表示される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 28, 2017, midnight
Registration Date	Sept. 29, 2017, 10:58 a.m.
Last Update	Oct. 2, 2025, 4:55 p.m.

Affected System

OpenSSL Project

OpenSSL

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-3735	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735
National Vulnerability Database (NVD)
2	CVE-2017-3735	https://nvd.nist.gov/vuln/detail/CVE-2017-3735

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
OpenSSL Security Advisory
1	Malformed X.509 IPAddressFamily could cause OOB read (CVE-2017-3735)	https://www.openssl.org/news/secadv/20170828.txt

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-19-024-02	https://www.us-cert.gov/ics/advisories/ICSA-19-024-02
2	ICSA-25-273-04	https://www.cisa.gov/news-events/ics-advisories/icsa-25-273-04
JVN
3	JVNVU#90492166	https://jvn.jp/vu/JVNVU90492166/index.html

Change Log

No	Changed Details	Date of change
1	[2019年07月10日] 参考情報：ICS-CERT ADVISORY (ICSA-19-024-02) を追加	July 10, 2019, 2:10 p.m.
0	[2017年09月29日] 掲載	Feb. 17, 2018, 10:37 a.m.
2	[2025年10月02日] 参考情報：JVN (JVNVU#90492166) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-273-04) を追加	Oct. 2, 2025, 2:05 p.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.1.0e:::::::*
cpe:2.3:a:openssl:openssl:0.9.8ze:::::::*
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:0.9.8b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:0.9.7l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:::::::*
cpe:2.3:a:openssl:openssl:1.1.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8n:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:0.9.8p:::::::*
cpe:2.3:a:openssl:openssl:1.0.2e:::::::*
cpe:2.3:a:openssl:openssl:1.0.2j:::::::*
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:0.9.7j:::::::*
cpe:2.3:a:openssl:openssl:0.9.8e:::::::*
cpe:2.3:a:openssl:openssl:0.9.8u:::::::*
cpe:2.3:a:openssl:openssl:0.9.8za:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:0.9.8g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8m:beta1::::::
cpe:2.3:a:openssl:openssl:0.9.8d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8j:::::::*
cpe:2.3:a:openssl:openssl:1.1.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:0.9.7k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:0.9.8s:::::::*
cpe:2.3:a:openssl:openssl:1.0.0p:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.0s:::::::*
cpe:2.3:a:openssl:openssl:1.0.2h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0o:::::::*
cpe:2.3:a:openssl:openssl:0.9.8l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8zc:::::::*
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:0.9.8r:::::::*
cpe:2.3:a:openssl:openssl:1.0.2c:::::::*
cpe:2.3:a:openssl:openssl:0.9.8t:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:0.9.8z:::::::*
cpe:2.3:a:openssl:openssl:1.1.0b:::::::*
cpe:2.3:a:openssl:openssl:1.1.0d:::::::*
cpe:2.3:a:openssl:openssl:0.9.8a:::::::*
cpe:2.3:a:openssl:openssl:1.1.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta3::::::
cpe:2.3:a:openssl:openssl:0.9.7m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.1.0a:::::::*
cpe:2.3:a:openssl:openssl:0.9.8zb:::::::*
cpe:2.3:a:openssl:openssl:0.9.8o:::::::*
cpe:2.3:a:openssl:openssl:0.9.8q:::::::*
cpe:2.3:a:openssl:openssl:0.9.8w:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:0.9.8v:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:::::::*
cpe:2.3:a:openssl:openssl:1.0.0r:::::::*
cpe:2.3:a:openssl:openssl:0.9.8i:::::::*
cpe:2.3:a:openssl:openssl:0.9.8f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8y:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0q:::::::*
cpe:2.3:a:openssl:openssl:0.9.8h:::::::*
cpe:2.3:a:openssl:openssl:0.9.8zg:::::::*
cpe:2.3:a:openssl:openssl:1.0.2f:::::::*
cpe:2.3:a:openssl:openssl:0.9.8x:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.2:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.2i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*
cpe:2.3:a:openssl:openssl:1.0.2d:::::::*
cpe:2.3:a:openssl:openssl:1.0.2k:::::::*
cpe:2.3:a:openssl:openssl:1.0.2l:::::::*