CVE-2017-3731 - CVE House
Back to Database
Status published High CVE-2017-3731

Truncated packet could crash via OOB read

Vulnerability Description

If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-3731

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Robert Święcki of Google

References

More from OpenSSL

View All →
CVE-2025-9232
Out-of-bounds read in HTTP client no_proxy handling
Unknown 0
CVE-2025-9231
Timing side-channel in SM2 algorithm on 64 bit ARM
Unknown 0
CVE-2025-9230
Out-of-bounds read & write in RFC 3211 KEK Unwrap
Unknown 0
CVE-2025-69421
NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
Unknown 0
CVE-2025-69420
Missing ASN1_TYPE validation in TS_RESP_verify_response() function
Unknown 0

Affected Vendor

Affected Software

OpenSSL
Vulnerable Versions:
openssl-1.1.0, openssl-1.1.0a, openssl-1.1.0b, openssl-1.1.0c, openssl-1.0.2, openssl-1.0.2a, openssl-1.0.2b, openssl-1.0.2c, openssl-1.0.2d, openssl-1.0.2e, openssl-1.0.2f, openssl-1.0.2g, openssl-1.0.2h, openssl-1.0.2i, openssl-1.0.2j

Timeline

Official Publish: May 4th, 2017
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.