Oval Definition:oval:org.cisecurity:def:1943
Revision Date:2017-03-10Version:2
Title:Truncated packet could crash via OOB read in OpenSSL 1.0.2 before 1.0.2k, and 1.1.0 before 1.1.0d - CVE-2017-3731
Description:If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.
Family:windowsClass:vulnerability
Status:DRAFTReference(s):CVE-2017-3731
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Vista
Microsoft Windows XP
Product(s):OpenSSL
Definition Synopsis
  • OpenSSL is installed + file version
  • OpenSSL is installed
  • AND Check for file version
  • Check if OpenSSL 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0d
  • OR Check if OpenSSL 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2k
  • OR OpenSSL (x86) is installed + file version
  • OpenSSL (32_bit) is installed
  • AND Check for file version
  • Check if OpenSSL 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0d (x86)
  • OR Check if OpenSSL 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2k (x86)
  • OR Check if ssleay32.dll 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0d on ProgramFilesDir
  • OR Check if ssleay32.dll 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0d on ProgramFilesDir (x86)
  • OR Check if ssleay32.dll 1.1.0 version is greater than or equal 1.1.0 and less than 1.1.0d on System32 and SysWOW64
  • OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2k on ProgramFilesDir
  • OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2k on ProgramFilesDir (x86)
  • OR Check if ssleay32.dll 1.0.2 version is greater than or equal 1.0.2 and less than 1.0.2k on System32 and SysWOW64
  • BACK