CVE-2017-3732 json
BN_mod_exp may produce incorrect results on x86_64
published 2017-05-04 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-12849
- cvss
- 5.9
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 15.4%
- EPSS 15.4% chance of exploitation in 30 days, percentile 96%
- public exploits
- 0
- none known
Summary
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.
Patch / fix
- nodejs node.js 4.7.3, 6.9.5, 7.5.0
- openssl Debian 14, Debian 13, Debian 12 1.1.0d-1
debian advisories DEBIAN-CVE-2017-3732
- openssl Ubuntu 16.04 LTS 1.0.2g-1ubuntu4.6
ubuntu advisories UBUNTU-CVE-2017-3732
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- java-1.8.0-ibm RHEL 6 EXTRAS, network satellite 5.8 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-src RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-demo RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-jdbc RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm-plugin RHEL 6 EXTRAS 1:1.8.0.5.20-1jpp.1.el6_10
- java-1.8.0-ibm RHEL 7 EXTRAS 1:1.8.0.5.20-1jpp.1.el7
- java-1.8.0-ibm-src RHEL 7 EXTRAS 1:1.8.0.5.20-1jpp.1.el7
- java-1.8.0-ibm-demo RHEL 7 EXTRAS 1:1.8.0.5.20-1jpp.1.el7
red hat advisories RHSA-2018:2713RHSA-2018:2575RHSA-2018:2568RHSA-2018:2185RHSA-2018:2186
- java-1_8_0-ibm SLES 12 SP3, SLES 12 SP2-BCL, SLE Software Development Kit 12 SP3 +7 more 1.8.0_sr5.20-30.36.1
- java-1_8_0-ibm SLE Module for Legacy 15 1.8.0_sr5.20-3.6.2
- nodejs4 SLE Module for Web and Scripting 12, Enterprise Storage 4 4.7.3-14.1
- openssl SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2, SLES 12 SP2 +2 more 1.0.2j-59.1
- nodejs6 SLE Module for Web and Scripting 12 6.9.5-7.1
suse advisories SUSE-SU-2018:2839-2SUSE-SU-2018:3082-1SUSE-SU-2018:2839-1SUSE-SU-2017:0855-1SUSE-SU-2017:0441-1SUSE-SU-2017:0431-1
- openssl-1_0_0 openSUSE Tumbleweed 1.0.2u-6.2
- openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2
opensuse advisories openSUSE-SU-2024:11126-1openSUSE-SU-2024:11127-1
- openssl Alpine 3.4, Alpine 3.3, Alpine 3.2 1.0.2k-r0
alpine advisories ALPINE-CVE-2017-3732
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- github.com/openssl/openssl@a59b90b commit
- oracle.com/technetwork/security-advisory/cpujan2018-3236628.html advisory
- oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html advisory
- oracle.com/technetwork/security-advisory/cpujul2017-3236622.html advisory
- oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2017-3732 updated cvss 5.9
openssl: BN_mod_exp may produce incorrect results on x86_64
-
Red Hat JBoss Enterprise Application Platform 6 openssl Red Hat JBoss Enterprise Web Server 2 opensslaffected: no fix planned “Will not fix”
-
Red Hat JBoss Web Server 3 opensslaffected: no fix available “Fix deferred”
-
Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el7 Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7fixed: vendor fix RHSA-2018:2568
-
Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el6_10 Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10 Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2575
-
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el7fixed: vendor fix RHSA-2018:2568
-
Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el6_10, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2575
-
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-src 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-demo 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-jdbc 1.8.0.5.20-1jpp.1.el7, java-1.8.0-ibm-plugin 1.8.0.5.20-1jpp.1.el7fixed: vendor fix RHSA-2018:2568
-
Red Hat JBoss Core Servicesfixed: vendor fix RHSA-2018:2187
show 4 moreshow fewer
-
Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-apr 1.6.3-14.jbcs.el6, jbcs-httpd24-httpd 2.4.29-17.jbcs.el6, jbcs-httpd24-apr-util 1.6.1-9.jbcs.el6, jbcs-httpd24-nghttp2 1.29.0-8.jbcs.el6, jbcs-httpd24-mod_ssl 2.4.29-17.jbcs.el6, jbcs-httpd24-openssl 1.0.2n-11.jbcs.el6, +25 morefixed: vendor fix RHSA-2018:2186
-
Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apr 1.6.3-14.jbcs.el7, jbcs-httpd24-httpd 2.4.29-17.jbcs.el7, jbcs-httpd24-apr-util 1.6.1-9.jbcs.el7, jbcs-httpd24-nghttp2 1.29.0-8.jbcs.el7, jbcs-httpd24-mod_ssl 2.4.29-17.jbcs.el7, jbcs-httpd24-openssl 1.0.2n-11.jbcs.el7, +25 morefixed: vendor fix RHSA-2018:2185
-
Red Hat Satellite 5.8 (RHEL v.6) java-1.8.0-ibm 1.8.0.5.20-1jpp.1.el6_10fixed: vendor fix RHSA-2018:2713
-
Red Hat Enterprise Linux 5 openssl, openssl097a Red Hat Enterprise Linux 6 openssl, openssl098e, openssl-perl Red Hat Enterprise Linux 7 OVMF, openssl, openssl098e, openssl-libs, openssl-perl Red Hat Enterprise Virtualization 3 mingw-virt-viewer, mingw32-virt-viewer, mingw64-virt-viewer Red Hat JBoss Enterprise Application Platform 5 openssl Red Hat JBoss Enterprise Web Server 1 opensslnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
15.40% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Affected products
- OpenSSL OpenSSL
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- Technology feeds
References
-
github.com
/openssl/openssl/commit/a59b90bf491410f1f2bc4540cc21f1980fd14c5b
patch
-
oracle.com
/technetwork/security-advisory/cpujan2018-3236628.html
patch, third-party-advisory
-
oracle.com
/technetwork/security-advisory/cpuoct2017-3236626.html
patch, third-party-advisory
-
oracle.com
/technetwork/security-advisory/cpujul2017-3236622.html
patch, third-party-advisory
-
oracle.com
/technetwork/security-advisory/cpuapr2019-5072813.html
patch, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2185
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2186
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2713
vendor-advisory, third-party-advisory
-
security.freebsd.org
/advisories/FreeBSD-SA-17:02.openssl.asc
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2575
vendor-advisory, third-party-advisory
-
security.gentoo.org
/glsa/201702-07
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2568
vendor-advisory, third-party-advisory
-
access.redhat.com
/errata/RHSA-2018:2187
vendor-advisory, third-party-advisory
-
openssl.org
/news/secadv/20170126.txt
vendor-advisory
-
securitytracker.com
/id/1037717
vdb-entry, third-party-advisory
-
tenable.com
/security/tns-2017-04
third-party-advisory
-
securityfocus.com
/bid/95814
vdb-entry, third-party-advisory
-
support.hpe.com
/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us
third-party-advisory
Sources
- CVE List CVE-2017-3732
- NVD CVE-2017-3732
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.