CVE-2017-3735MediumCVSS 5.3

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

Published
April 26, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2017-3735 →

🎯 Affected products8

  • azl3 shim-unsigned-aarch64 16.1-1 on Azure Linux 3.0
  • azl3 shim-unsigned-aarch64 16.1-2 on Azure Linux 3.0
  • azl3 shim-unsigned-x64 16.1-1 on Azure Linux 3.0
  • azl3 shim-unsigned-x64 16.1-2 on Azure Linux 3.0
  • cbl2 shim-unsigned-aarch64 15-5 on CBL Mariner 2.0
  • cbl2 shim-unsigned-aarch64 15-5 on CBL-Mariner 2.0
  • cbl2 shim-unsigned-x64 15.8-1 on CBL Mariner 2.0
  • cbl2 shim-unsigned-x64 15.8-1 on CBL-Mariner 2.0

✅ Remediation

Security Update

🔗 References (2)