CVE-2017-3737

Description

OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an error state mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.

Risk Information

Base Score
5.9
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
42.931

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-3738,CVE-2017-3737 are fixed in OpenSSL (x64) 1.0.2nWindows
Multiple vulnerabilities affected in Mysql 5.6.21Windows
Multiple vulnerabilities affected in Mysql 5.6.22Windows
Multiple vulnerabilities affected in Mysql 5.6.23Windows
Multiple vulnerabilities affected in Mysql 5.6.24Windows
Multiple vulnerabilities affected in Mysql 5.6.25Windows
Multiple vulnerabilities affected in Mysql 5.6.26Windows
Multiple vulnerabilities affected in Mysql 5.6.35Windows
Multiple vulnerabilities affected in Mysql 5.6.9Windows
Vulnerabilities CVE-2017-15896,CVE-2017-3737,CVE-2017-15897 are fixed in Node.js 10 (10.24.1)Windows
Vulnerabilities CVE-2017-15896,CVE-2017-3737,CVE-2017-15897 are fixed in Node.js 8 8.9.3Windows
Vulnerabilities CVE-2017-15896,CVE-2017-3737,CVE-2017-15897 are fixed in Node.js 8 (x64) 8.9.3Windows
Vulnerabilities CVE-2017-15896,CVE-2017-3737,CVE-2017-15897 are fixed in Node.js 9.2.1Windows
Vulnerabilities CVE-2017-15896,CVE-2017-3737,CVE-2017-15897 are fixed in Node.js 6.12.2Windows
Vulnerabilities CVE-2017-15896,CVE-2017-3737,CVE-2017-15897 are fixed in Node.js 4.8.7Windows
Multiple vulnerabilities are affected in Mysql 5.6.38Windows
Multiple vulnerabilities are affected in Mysql 5.7.20Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.12.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.1Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.3.0Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.3.1Windows
Openssl 1.0.2g-1ubuntu11.2 for Ubuntu 17.04 (x64) openssl_1.0.2g-1ubuntu11.4_amd64.debLinux
Openssl 1.0.2g-1ubuntu11.2 for Ubuntu 17.04 openssl_1.0.2g-1ubuntu11.4_i386.debLinux
Secure Socket Layer (SSL) cryptographic library and tools (USN-3512-1) libssl1.0.0_1.0.2g-1ubuntu11.4_i386.debLinux
Secure Socket Layer (SSL) cryptographic library and tools (USN-3512-1) libssl1.0.0_1.0.2g-1ubuntu11.4_amd64.debLinux
Secure Socket Layer (SSL) cryptographic library and tools (USN-3512-1) libssl1.0.0_1.0.2g-1ubuntu13.3_i386.debLinux
Secure Socket Layer (SSL) cryptographic library and tools (USN-3512-1) libssl1.0.0_1.0.2g-1ubuntu13.3_amd64.debLinux
Secure Socket Layer (SSL) cryptographic library and tools (USN-3512-1) libssl1.0.0_1.0.2g-1ubuntu4.10_i386.debLinux
Secure Socket Layer (SSL) cryptographic library and tools (USN-3512-1) libssl1.0.0_1.0.2g-1ubuntu4.10_amd64.debLinux
Multiple vulnerabilities affected in Mysql 5.6.21 (For Linux)Linux
Multiple vulnerabilities affected in Mysql 5.6.22 (For Linux)Linux
Multiple vulnerabilities affected in Mysql 5.6.23 (For Linux)Linux
Multiple vulnerabilities affected in Mysql 5.6.24 (For Linux)Linux
Multiple vulnerabilities affected in Mysql 5.6.25 (For Linux)Linux
Multiple vulnerabilities affected in Mysql 5.6.26 (For Linux)Linux
Multiple vulnerabilities affected in Mysql 5.6.35 (For Linux)Linux
Multiple vulnerabilities affected in Mysql 5.6.9 (For Linux)Linux
Out-of-bounds Read Vulnerability (CVE-2017-3737)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-319042Node.js 10 (10.24.1)
PATCH-319042Node.js 10 (10.24.1)
PATCH-319042Node.js 10 (10.24.1)
PATCH-319042Node.js 10 (10.24.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234