DeutschShown in its original language — a full translation is planned for a future version.
OpenSSL: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
view advisory published 2017-12-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-3738US | medium5.9 | — | ||
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks… | ||||
| CVE-2017-3737US | medium5.9OT high | — | ||
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into th… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2018-4077 vom 2018-04-19external
- Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13external
- Hitachi Security Information hitachi-sec-2018-124external
- Ubuntu Security Notice USN-3512-1 vom 2017-12-12external
- Red Hat Security Advisory RHSA-2018:2185 vom 2018-07-13external
- SolarWinds Platform 2025.4 release notes vom 2025-10-21external
- Juniper Security Advisory JSA10851 vom 2018-04-12external
- McAfee Security Bulletinexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan