{"id":"CVE-2017-3735","details":"While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.","modified":"2026-07-08T15:11:26.028638Z","published":"2017-08-28T19:29:01.353Z","related":["SUSE-FU-2022:0445-1","SUSE-SU-2017:2968-1","SUSE-SU-2017:2981-1","SUSE-SU-2017:3169-1","SUSE-SU-2018:0002-1","SUSE-SU-2018:0112-1","SUSE-SU-2018:0293-1","SUSE-SU-2019:14246-1","openSUSE-SU-2024:11126-1","openSUSE-SU-2024:11127-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"}]},"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html"},{"type":"WEB","url":"https://support.apple.com/HT208331"},{"type":"WEB","url":"https://usn.ubuntu.com/3611-2/"},{"type":"WEB","url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"type":"WEB","url":"https://www.tenable.com/security/tns-2017-15"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"},{"type":"ADVISORY","url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/100515"},{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1039726"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3221"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2018:3505"},{"type":"ADVISORY","url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201712-03"},{"type":"ADVISORY","url":"https://www.debian.org/security/2017/dsa-4017"},{"type":"ADVISORY","url":"https://www.debian.org/security/2017/dsa-4018"},{"type":"ADVISORY","url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"},{"type":"ADVISORY","url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"},{"type":"ADVISORY","url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"},{"type":"REPORT","url":"https://security.netapp.com/advisory/ntap-20170927-0001/"},{"type":"REPORT","url":"https://security.netapp.com/advisory/ntap-20171107-0002/"},{"type":"REPORT","url":"https://www.openssl.org/news/secadv/20171102.txt"},{"type":"REPORT","url":"https://www.tenable.com/security/tns-2017-14"},{"type":"FIX","url":"https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822"},{"type":"FIX","url":"https://www.openssl.org/news/secadv/20170828.txt"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"10626fac1569ea37839c37b105681cd08dbe6658"},{"last_affected":"7ea5bd2b52d0e81eaef3d109b3b12545306f201c"},{"fixed":"068b963bb7afc57f5bdd723de0dd15e7795d5822"}],"database_specific":{"source":["CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:openssl:openssl:0.9.7j:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.7k:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.7l:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.7m:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8m:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8n:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8o:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8p:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8q:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8r:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8s:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8t:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8u:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8v:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8w:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8x:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8y:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8z:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8za:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8zb:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8zc:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8ze:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8zg:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:0.9.8m:beta1:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0o:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0p:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0s:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1j:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1k:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1l:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.0a:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.0b:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.0c:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.0d:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.0e:*:*:*:*:*:*:*","cpe:2.3:a:openssl:openssl:1.1.0f:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0.9.7j"},{"last_affected":"0.9.7j"},{"introduced":"0.9.7k"},{"last_affected":"0.9.7k"},{"introduced":"0.9.7l"},{"last_affected":"0.9.7l"},{"introduced":"0.9.7m"},{"last_affected":"0.9.7m"},{"introduced":"0.9.8"},{"last_affected":"0.9.8"},{"introduced":"0.9.8a"},{"last_affected":"0.9.8a"},{"introduced":"0.9.8b"},{"last_affected":"0.9.8b"},{"introduced":"0.9.8c"},{"last_affected":"0.9.8c"},{"introduced":"0.9.8d"},{"last_affected":"0.9.8d"},{"introduced":"0.9.8e"},{"last_affected":"0.9.8e"},{"introduced":"0.9.8f"},{"last_affected":"0.9.8f"},{"introduced":"0.9.8g"},{"last_affected":"0.9.8g"},{"introduced":"0.9.8h"},{"last_affected":"0.9.8h"},{"introduced":"0.9.8i"},{"last_affected":"0.9.8i"},{"introduced":"0.9.8j"},{"last_affected":"0.9.8j"},{"introduced":"0.9.8k"},{"last_affected":"0.9.8k"},{"introduced":"0.9.8l"},{"last_affected":"0.9.8l"},{"introduced":"0.9.8m"},{"last_affected":"0.9.8m"},{"introduced":"0.9.8n"},{"last_affected":"0.9.8n"},{"introduced":"0.9.8o"},{"last_affected":"0.9.8o"},{"introduced":"0.9.8p"},{"last_affected":"0.9.8p"},{"introduced":"0.9.8q"},{"last_affected":"0.9.8q"},{"introduced":"0.9.8r"},{"last_affected":"0.9.8r"},{"introduced":"0.9.8s"},{"last_affected":"0.9.8s"},{"introduced":"0.9.8t"},{"last_affected":"0.9.8t"},{"introduced":"0.9.8u"},{"last_affected":"0.9.8u"},{"introduced":"0.9.8v"},{"last_affected":"0.9.8v"},{"introduced":"0.9.8w"},{"last_affected":"0.9.8w"},{"introduced":"0.9.8x"},{"last_affected":"0.9.8x"},{"introduced":"0.9.8y"},{"last_affected":"0.9.8y"},{"introduced":"0.9.8z"},{"last_affected":"0.9.8z"},{"introduced":"0.9.8za"},{"last_affected":"0.9.8za"},{"introduced":"0.9.8zb"},{"last_affected":"0.9.8zb"},{"introduced":"0.9.8zc"},{"last_affected":"0.9.8zc"},{"introduced":"0.9.8ze"},{"last_affected":"0.9.8ze"},{"introduced":"0.9.8zg"},{"last_affected":"0.9.8zg"},{"introduced":"0.9.8m-beta1"},{"last_affected":"0.9.8m-beta1"},{"introduced":"1.0.0"},{"last_affected":"1.0.0"},{"introduced":"1.0.0a"},{"last_affected":"1.0.0a"},{"introduced":"1.0.0b"},{"last_affected":"1.0.0b"},{"introduced":"1.0.0c"},{"last_affected":"1.0.0c"},{"introduced":"1.0.0d"},{"last_affected":"1.0.0d"},{"introduced":"1.0.0e"},{"last_affected":"1.0.0e"},{"introduced":"1.0.0f"},{"last_affected":"1.0.0f"},{"introduced":"1.0.0g"},{"last_affected":"1.0.0g"},{"introduced":"1.0.0h"},{"last_affected":"1.0.0h"},{"introduced":"1.0.0i"},{"last_affected":"1.0.0i"},{"introduced":"1.0.0j"},{"last_affected":"1.0.0j"},{"introduced":"1.0.0k"},{"last_affected":"1.0.0k"},{"introduced":"1.0.0l"},{"last_affected":"1.0.0l"},{"introduced":"1.0.0m"},{"last_affected":"1.0.0m"},{"introduced":"1.0.0n"},{"last_affected":"1.0.0n"},{"introduced":"1.0.0o"},{"last_affected":"1.0.0o"},{"introduced":"1.0.0p"},{"last_affected":"1.0.0p"},{"introduced":"1.0.0q"},{"last_affected":"1.0.0q"},{"introduced":"1.0.0r"},{"last_affected":"1.0.0r"},{"introduced":"1.0.0s"},{"last_affected":"1.0.0s"},{"introduced":"1.0.0-beta1"},{"last_affected":"1.0.0-beta1"},{"introduced":"1.0.0-beta2"},{"last_affected":"1.0.0-beta2"},{"introduced":"1.0.0-beta3"},{"last_affected":"1.0.0-beta3"},{"introduced":"1.0.0-beta4"},{"last_affected":"1.0.0-beta4"},{"introduced":"1.0.0-beta5"},{"last_affected":"1.0.0-beta5"},{"introduced":"1.0.1"},{"last_affected":"1.0.1"},{"introduced":"1.0.1a"},{"last_affected":"1.0.1a"},{"introduced":"1.0.1b"},{"last_affected":"1.0.1b"},{"introduced":"1.0.1c"},{"last_affected":"1.0.1c"},{"introduced":"1.0.1d"},{"last_affected":"1.0.1d"},{"introduced":"1.0.1e"},{"last_affected":"1.0.1e"},{"introduced":"1.0.1f"},{"last_affected":"1.0.1f"},{"introduced":"1.0.1g"},{"last_affected":"1.0.1g"},{"introduced":"1.0.1h"},{"last_affected":"1.0.1h"},{"introduced":"1.0.1i"},{"last_affected":"1.0.1i"},{"introduced":"1.0.1j"},{"last_affected":"1.0.1j"},{"introduced":"1.0.1k"},{"last_affected":"1.0.1k"},{"introduced":"1.0.1l"},{"last_affected":"1.0.1l"},{"introduced":"1.0.1-beta1"},{"last_affected":"1.0.1-beta1"},{"introduced":"1.0.1-beta2"},{"last_affected":"1.0.1-beta2"},{"introduced":"1.0.1-beta3"},{"last_affected":"1.0.1-beta3"},{"introduced":"1.0.2"},{"last_affected":"1.0.2"},{"introduced":"1.0.2a"},{"last_affected":"1.0.2a"},{"introduced":"1.0.2b"},{"last_affected":"1.0.2b"},{"introduced":"1.0.2c"},{"last_affected":"1.0.2c"},{"introduced":"1.0.2d"},{"last_affected":"1.0.2d"},{"introduced":"1.0.2e"},{"last_affected":"1.0.2e"},{"introduced":"1.0.2f"},{"last_affected":"1.0.2f"},{"introduced":"1.0.2h"},{"last_affected":"1.0.2h"},{"introduced":"1.0.2i"},{"last_affected":"1.0.2i"},{"introduced":"1.0.2j"},{"last_affected":"1.0.2j"},{"introduced":"1.0.2k"},{"last_affected":"1.0.2k"},{"introduced":"1.0.2l"},{"last_affected":"1.0.2l"},{"introduced":"1.0.2-beta1"},{"last_affected":"1.0.2-beta1"},{"introduced":"1.0.2-beta2"},{"last_affected":"1.0.2-beta2"},{"introduced":"1.0.2-beta3"},{"last_affected":"1.0.2-beta3"},{"introduced":"1.1.0"},{"last_affected":"1.1.0"},{"introduced":"1.1.0a"},{"last_affected":"1.1.0a"},{"introduced":"1.1.0b"},{"last_affected":"1.1.0b"},{"introduced":"1.1.0c"},{"last_affected":"1.1.0c"},{"introduced":"1.1.0d"},{"last_affected":"1.1.0d"},{"introduced":"1.1.0e"},{"last_affected":"1.1.0e"},{"introduced":"1.1.0f"},{"last_affected":"1.1.0f"}]}}],"versions":["0.9.7j","0.9.8","0.9.8m-beta1","1.0.0","1.0.0-beta1","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-beta5","1.0.1","1.0.1-beta1","1.0.1-beta2","1.0.1-beta3","1.0.2","1.0.2-beta1","1.0.2-beta2","1.0.2-beta3","1.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-3735.json","vanir_signatures_modified":"2026-07-08T15:11:26Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822","target":{"file":"crypto/x509v3/v3_addr.c","function":"X509v3_addr_get_afi"},"deprecated":false,"digest":{"length":257,"function_hash":"208379985860684619268173937024277364981"},"id":"CVE-2017-3735-2142274c"},{"target":{"file":"crypto/x509v3/v3_addr.c"},"deprecated":false,"digest":{"line_hashes":["7845397449413559425215778482047677846","207653610646830533992290501458377593330","174509823600981861032748115460464239886","192650640657398900158594109941984932058","211215256581144995289213155903521295219","192968340343454854111328050829945119022","279966053529557468968767575759043715403"],"threshold":0.9},"id":"CVE-2017-3735-9d266ab3","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}]}