While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
2017-08-28T19:29:01.353
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 5.3 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:P/A:N
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | openssl | openssl | 0.9.7j | Yes |
| Application | openssl | openssl | 0.9.7k | Yes |
| Application | openssl | openssl | 0.9.7l | Yes |
| Application | openssl | openssl | 0.9.7m | Yes |
| Application | openssl | openssl | 0.9.8 | Yes |
| Application | openssl | openssl | 0.9.8a | Yes |
| Application | openssl | openssl | 0.9.8b | Yes |
| Application | openssl | openssl | 0.9.8c | Yes |
| Application | openssl | openssl | 0.9.8d | Yes |
| Application | openssl | openssl | 0.9.8e | Yes |
| Application | openssl | openssl | 0.9.8f | Yes |
| Application | openssl | openssl | 0.9.8g | Yes |
| Application | openssl | openssl | 0.9.8h | Yes |
| Application | openssl | openssl | 0.9.8i | Yes |
| Application | openssl | openssl | 0.9.8j | Yes |
| Application | openssl | openssl | 0.9.8k | Yes |
| Application | openssl | openssl | 0.9.8l | Yes |
| Application | openssl | openssl | 0.9.8m | Yes |
| Application | openssl | openssl | 0.9.8m | Yes |
| Application | openssl | openssl | 0.9.8n | Yes |
| Application | openssl | openssl | 0.9.8o | Yes |
| Application | openssl | openssl | 0.9.8p | Yes |
| Application | openssl | openssl | 0.9.8q | Yes |
| Application | openssl | openssl | 0.9.8r | Yes |
| Application | openssl | openssl | 0.9.8s | Yes |
| Application | openssl | openssl | 0.9.8t | Yes |
| Application | openssl | openssl | 0.9.8u | Yes |
| Application | openssl | openssl | 0.9.8v | Yes |
| Application | openssl | openssl | 0.9.8w | Yes |
| Application | openssl | openssl | 0.9.8x | Yes |
| Application | openssl | openssl | 0.9.8y | Yes |
| Application | openssl | openssl | 0.9.8z | Yes |
| Application | openssl | openssl | 0.9.8za | Yes |
| Application | openssl | openssl | 0.9.8zb | Yes |
| Application | openssl | openssl | 0.9.8zc | Yes |
| Application | openssl | openssl | 0.9.8ze | Yes |
| Application | openssl | openssl | 0.9.8zg | Yes |
| Application | openssl | openssl | 1.0.0 | Yes |
| Application | openssl | openssl | 1.0.0 | Yes |
| Application | openssl | openssl | 1.0.0 | Yes |
| Application | openssl | openssl | 1.0.0 | Yes |
| Application | openssl | openssl | 1.0.0 | Yes |
| Application | openssl | openssl | 1.0.0 | Yes |
| Application | openssl | openssl | 1.0.0a | Yes |
| Application | openssl | openssl | 1.0.0b | Yes |
| Application | openssl | openssl | 1.0.0c | Yes |
| Application | openssl | openssl | 1.0.0d | Yes |
| Application | openssl | openssl | 1.0.0e | Yes |
| Application | openssl | openssl | 1.0.0f | Yes |
| Application | openssl | openssl | 1.0.0g | Yes |
| Application | openssl | openssl | 1.0.0h | Yes |
| Application | openssl | openssl | 1.0.0i | Yes |
| Application | openssl | openssl | 1.0.0j | Yes |
| Application | openssl | openssl | 1.0.0k | Yes |
| Application | openssl | openssl | 1.0.0l | Yes |
| Application | openssl | openssl | 1.0.0m | Yes |
| Application | openssl | openssl | 1.0.0n | Yes |
| Application | openssl | openssl | 1.0.0o | Yes |
| Application | openssl | openssl | 1.0.0p | Yes |
| Application | openssl | openssl | 1.0.0q | Yes |
| Application | openssl | openssl | 1.0.0r | Yes |
| Application | openssl | openssl | 1.0.0s | Yes |
| Application | openssl | openssl | 1.0.1 | Yes |
| Application | openssl | openssl | 1.0.1 | Yes |
| Application | openssl | openssl | 1.0.1 | Yes |
| Application | openssl | openssl | 1.0.1 | Yes |
| Application | openssl | openssl | 1.0.1a | Yes |
| Application | openssl | openssl | 1.0.1b | Yes |
| Application | openssl | openssl | 1.0.1c | Yes |
| Application | openssl | openssl | 1.0.1d | Yes |
| Application | openssl | openssl | 1.0.1e | Yes |
| Application | openssl | openssl | 1.0.1f | Yes |
| Application | openssl | openssl | 1.0.1g | Yes |
| Application | openssl | openssl | 1.0.1h | Yes |
| Application | openssl | openssl | 1.0.1i | Yes |
| Application | openssl | openssl | 1.0.1j | Yes |
| Application | openssl | openssl | 1.0.1k | Yes |
| Application | openssl | openssl | 1.0.1l | Yes |
| Application | openssl | openssl | 1.0.2 | Yes |
| Application | openssl | openssl | 1.0.2 | Yes |
| Application | openssl | openssl | 1.0.2 | Yes |
| Application | openssl | openssl | 1.0.2 | Yes |
| Application | openssl | openssl | 1.0.2a | Yes |
| Application | openssl | openssl | 1.0.2b | Yes |
| Application | openssl | openssl | 1.0.2c | Yes |
| Application | openssl | openssl | 1.0.2d | Yes |
| Application | openssl | openssl | 1.0.2e | Yes |
| Application | openssl | openssl | 1.0.2f | Yes |
| Application | openssl | openssl | 1.0.2h | Yes |
| Application | openssl | openssl | 1.0.2i | Yes |
| Application | openssl | openssl | 1.0.2j | Yes |
| Application | openssl | openssl | 1.0.2k | Yes |
| Application | openssl | openssl | 1.0.2l | Yes |
| Application | openssl | openssl | 1.1.0 | Yes |
| Application | openssl | openssl | 1.1.0a | Yes |
| Application | openssl | openssl | 1.1.0b | Yes |
| Application | openssl | openssl | 1.1.0c | Yes |
| Application | openssl | openssl | 1.1.0d | Yes |
| Application | openssl | openssl | 1.1.0e | Yes |
| Application | openssl | openssl | 1.1.0f | Yes |
| Operating System | debian | debian_linux | 8.0 | Yes |
| Operating System | debian | debian_linux | 9.0 | Yes |