While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
CVSS Details
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl | Nov 10, 2017 | Aug 28, 2017 |
| Amazon Linux Ami 2 | — | Upgrade opensslUpgrade openssl-develUpgrade openssl-staticUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-debuginfo | Apr 27, 2020 | Aug 28, 2017 |
| Amazon_linux | — | Upgrade openssl | Dec 7, 2018 | Aug 28, 2017 |
| Apple Osx Openssl | — | Apply OS X security update 2017-005 El CapitanApply OS X security update 2017-002 SierraUpgrade macOS to the latest version | Dec 7, 2017 | Aug 28, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 28, 2017 |
| Centos_linux | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl-debuginfoUpgrade openssl-staticUpgrade openssl-perlUpgrade openssl | Jun 10, 2019 | Aug 28, 2017 |
| Debian | — | Upgrade openssl | Nov 4, 2017 | Aug 28, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 13, 2017 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssl-develUpgrade openssl | Dec 6, 2017 | Dec 6, 2017 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Dec 18, 2017 | Aug 28, 2017 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Aug 29, 2017 | Aug 28, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade openssl098e | Dec 31, 2018 | Aug 28, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl | Dec 11, 2018 | Aug 28, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl098e | Jan 9, 2019 | Aug 28, 2017 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | Sep 29, 2021 | Aug 28, 2017 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory24 | Dec 18, 2017 | Aug 28, 2017 |
| Oracle Solaris | — | Upgrade database/mysql-56/client to version 5.6.39-0.175.3.31.0.2.0 on Solaris 11.3Upgrade database/mysql-55/tests to version 5.5.59-0.175.3.31.0.2.0 on Solaris 11.3Upgrade database/mysql-55 to version 5.5.59-0.175.3.31.0.2.0 on Solaris 11.3Upgrade database/mysql-55/client to version 5.5.59-0.175.3.31.0.2.0 on Solaris 11.3Upgrade database/mysql-55/library to version 5.5.59-0.175.3.31.0.2.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.2.12-0.175.3.26.0.5.0 on Solaris 11.3Upgrade database/mysql-56 to version 5.6.39-0.175.3.31.0.2.0 on Solaris 11.3Upgrade database/mysql-56/tests to version 5.6.39-0.175.3.31.0.2.0 on Solaris 11.3Upgrade library/security/openssl/openssl-fips-140 to version 2.0.12-0.175.3.26.0.5.0 on Solaris 11.3Upgrade database/mysql-56/library to version 5.6.39-0.175.3.31.0.2.0 on Solaris 11.3 | Nov 30, 2017 | Aug 28, 2017 |
| Oracle_linux | — | Upgrade openssl-perlUpgrade openssl-develUpgrade openssl-libsUpgrade openssl-staticUpgrade openssl | Jul 31, 2018 | Aug 28, 2017 |
| Red Hat Jboss Eap | — | — | Sep 19, 2024 | Aug 28, 2017 |
| Redhat_linux | — | Upgrade openssl-debuginfoUpgrade openssl-perlUpgrade openssl-libsUpgrade openssl-develNo solution existsUpgrade openssl-staticUpgrade openssl | Oct 31, 2018 | Aug 28, 2017 |
| Suse | — | Upgrade opensslUpgrade libopenssl1_0_0Upgrade firefox-gtk3-immodule-multipressUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl10Upgrade libopenssl-develUpgrade MozillaFirefoxUpgrade firefox-gtk3-immodule-thaiUpgrade libfreebl3-32bitUpgrade libopenssl1_0_0-32bitUpgrade libopenssl1_1-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade nodejs8Upgrade nodejs6-develUpgrade libopenssl1_0_0-hmacUpgrade openssl-docUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-langUpgrade mozilla-nss-toolsUpgrade mozilla-nspr-develUpgrade nodejs6Upgrade libsoftokn3-32bitUpgrade libopenssl1_0_0-x86Upgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nss-develUpgrade MozillaFirefox-translations-otherUpgrade libopenssl1_0_0-hmac-32bitUpgrade libsoftokn3Upgrade MozillaFirefox-translations-commonUpgrade libopenssl1_1-hmac-32bitUpgrade libfirefox-gthread-2_0-0Upgrade nodejs8-develUpgrade firefox-libharfbuzz0Upgrade npm8Upgrade firefox-libffi4Upgrade npm6Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-dataUpgrade nodejs8-docsUpgrade firefox-libatk-1_0-0Upgrade libopenssl-1_0_0-develUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade openssl1Upgrade mozilla-nss-certs-32bitUpgrade libfreebl3Upgrade openssl-1_0_0-docUpgrade libfirefox-glib-2_0-0Upgrade firefox-gdk-pixbuf-langUpgrade nodejs4-develUpgrade mozilla-nsprUpgrade firefox-libffi7Upgrade libopenssl1-develUpgrade firefox-glib2-toolsUpgrade firefox-gtk3-toolsUpgrade mozilla-nssUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-libcairo2Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-gio-2_0-0Upgrade firefox-atk-langUpgrade firefox-gtk3-immodule-ximUpgrade openssl-1_0_0Upgrade mozilla-nspr-32bitUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-certsUpgrade firefox-gio-branding-upstreamUpgrade openssl1-docUpgrade nodejs4-docsUpgrade libopenssl1_1Upgrade firefox-libcairo-gobject2Upgrade npm4Upgrade openssl-1_1Upgrade libopenssl1_1-hmacUpgrade mozilla-nss-32bitUpgrade firefox-libpango-1_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-glib2-langUpgrade nodejs6-docsUpgrade libopenssl-1_1-develUpgrade nodejs4 | Nov 9, 2017 | Aug 28, 2017 |
| Ubuntu | — | Upgrade opensslUpgrade libssl1.0.0 | Nov 6, 2017 | Aug 28, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub