CVE-2017-3731
If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 57.3%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 57.32% probability · 99th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- openssl/openssl · nodejs/node.js
- Source
- openssl-security@openssl.org
EPSS 57.3% since 27 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://rhn.redhat.com/errata/RHSA-2017-0286.htmlThird Party Advisory
- http://www.debian.org/security/2017/dsa-3773Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlPatch, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/95813Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037717Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:2185Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2186Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2187Third Party Advisory
- https://github.com/openssl/openssl/commit/00d965474b22b54e4275232bc71ee0c699c5cd21Third Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-17:02.openssl.ascThird Party Advisory
- https://security.gentoo.org/glsa/201702-07Third Party Advisory
- https://security.netapp.com/advisory/ntap-20171019-0002/Third Party Advisory
- https://security.paloaltonetworks.com/CVE-2017-3731Third Party Advisory
- https://source.android.com/security/bulletin/pixel/2017-11-01Third Party Advisory
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_usThird Party Advisory
- https://www.openssl.org/news/secadv/20170126.txtVendor Advisory
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Third Party Advisory
- https://www.tenable.com/security/tns-2017-04Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0286.htmlThird Party Advisory
- http://www.debian.org/security/2017/dsa-3773Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.htmlPatch, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlPatch, Third Party Advisory
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.htmlPatch, Third Party Advisory
- http://www.securityfocus.com/bid/95813Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037717Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:2185Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2186Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2187Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.