CVE-2017-3735 [Medium] | Memory Corruption in Openssl

CVE-2017-3735 is rated Moderate Risk (57.4/100): CVSS Medium severity, with high exploitation likelihood (EPSS 38.62%, 97th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +2.17% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-05-14	36.45%	38.62%	+2.17%
2	2026-05-01	38.62%	36.45%	-2.17%
3	2026-04-26	—	38.62%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-05-14

36.45%

38.62%

+2.17%

2026-05-01

38.62%

36.45%

-2.17%

2026-04-26

—

38.62%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
5.3	3.0	MEDIUM	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N` Click to expand Attack vector (AV:N) Could be attacked over the internet or any normal routed network—not just someone sitting at the machine. Attack complexity (AC:L) Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup. Privileges required (PR:N) No account or special rights needed—anonymous or random user is enough. User interaction (UI:N) Nobody has to click “OK” or open a trap file; it can work without a victim helping. Scope (S:U) Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems. Confidentiality (C:N) Doesn’t really leak secrets in a meaningful way. Integrity (I:L) Attackers could change some data, but it’s limited—not everything goes. Availability (A:N) Service keeps running; no real outage angle.	3.9	1.4	[email protected]
5.0	2.0	MEDIUM	`AV:N/AC:L/Au:N/C:N/I:P/A:N` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:N) No confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:N) No availability impact.	10.0	2.9	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

5.3

3.0

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Click to expand

Attack vector (AV:N): Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L): Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N): No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N): Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U): Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N): Doesn’t really leak secrets in a meaningful way.
Integrity (I:L): Attackers could change some data, but it’s limited—not everything goes.
Availability (A:N): Service keeps running; no real outage angle.

3.9

1.4

[email protected]

5.0

2.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:N): No confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:N): No availability impact.

10.0

2.9

[email protected]

OS Trackers for CVE-2017-3735

vendor	priority	summary	link
`debian`	not yet assigned	CVE-2017-3735 not yet assigned priority: Debian including 1 source packages (openssl), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2017-3735
`gentoo`	normal	CVE-2017-3735: 1 GLSA(s) (201712-03), 1 atom(s) (dev-libs/openssl); latest impact normal.	https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2017-3735
`redhat`	low	—	https://access.redhat.com/security/cve/CVE-2017-3735
`suse`	low	CVE-2017-3735 severity low: SUSE including 515 source package names (0.9.1:libopenssl1_0_0-1.0.2j-60.16.1, 0.9.1:openssl-1.0.2j-60.16.1, …), 957 product×package rows across 101 product lines (Container caasp/v4/default-http-backend, Container caasp/v4/dnsmasq-nanny, … (101 product lines)): Fixed 526, Known Not Affected 274, Known Affected 157.	https://www.suse.com/security/cve/CVE-2017-3735/
`ubuntu`	low	CVE-2017-3735 low priority: Ubuntu including 3 source packages (openssl, openssl098, openssl1.0), 23 status rows across 8 suites (artful, bionic, cosmic, disco, trusty, upstream, xenial, zesty): DNE 11, released 8, needs-triage 2, not-affected 2.	https://ubuntu.com/security/CVE-2017-3735

Affected software / configurations for CVE-2017-3735

Vendor	Product	Version	Raw CPE
openssl	openssl	0.9.7j	cpe:2.3:a:openssl:openssl:0.9.7j:::::::*
openssl	openssl	0.9.7k	cpe:2.3:a:openssl:openssl:0.9.7k:::::::*
openssl	openssl	0.9.7l	cpe:2.3:a:openssl:openssl:0.9.7l:::::::*
openssl	openssl	0.9.7m	cpe:2.3:a:openssl:openssl:0.9.7m:::::::*
openssl	openssl	0.9.8	cpe:2.3:a:openssl:openssl:0.9.8:::::::*
openssl	openssl	0.9.8a	cpe:2.3:a:openssl:openssl:0.9.8a:::::::*
openssl	openssl	0.9.8b	cpe:2.3:a:openssl:openssl:0.9.8b:::::::*
openssl	openssl	0.9.8c	cpe:2.3:a:openssl:openssl:0.9.8c:::::::*
openssl	openssl	0.9.8d	cpe:2.3:a:openssl:openssl:0.9.8d:::::::*
openssl	openssl	0.9.8e	cpe:2.3:a:openssl:openssl:0.9.8e:::::::*
openssl	openssl	0.9.8f	cpe:2.3:a:openssl:openssl:0.9.8f:::::::*
openssl	openssl	0.9.8g	cpe:2.3:a:openssl:openssl:0.9.8g:::::::*
openssl	openssl	0.9.8h	cpe:2.3:a:openssl:openssl:0.9.8h:::::::*
openssl	openssl	0.9.8i	cpe:2.3:a:openssl:openssl:0.9.8i:::::::*
openssl	openssl	0.9.8j	cpe:2.3:a:openssl:openssl:0.9.8j:::::::*
openssl	openssl	0.9.8k	cpe:2.3:a:openssl:openssl:0.9.8k:::::::*
openssl	openssl	0.9.8l	cpe:2.3:a:openssl:openssl:0.9.8l:::::::*
openssl	openssl	0.9.8m	cpe:2.3:a:openssl:openssl:0.9.8m:::::::*
openssl	openssl	0.9.8m	cpe:2.3:a:openssl:openssl:0.9.8m:beta1::::::
openssl	openssl	0.9.8n	cpe:2.3:a:openssl:openssl:0.9.8n:::::::*
openssl	openssl	0.9.8o	cpe:2.3:a:openssl:openssl:0.9.8o:::::::*
openssl	openssl	0.9.8p	cpe:2.3:a:openssl:openssl:0.9.8p:::::::*
openssl	openssl	0.9.8q	cpe:2.3:a:openssl:openssl:0.9.8q:::::::*
openssl	openssl	0.9.8r	cpe:2.3:a:openssl:openssl:0.9.8r:::::::*
openssl	openssl	0.9.8s	cpe:2.3:a:openssl:openssl:0.9.8s:::::::*
openssl	openssl	0.9.8t	cpe:2.3:a:openssl:openssl:0.9.8t:::::::*
openssl	openssl	0.9.8u	cpe:2.3:a:openssl:openssl:0.9.8u:::::::*
openssl	openssl	0.9.8v	cpe:2.3:a:openssl:openssl:0.9.8v:::::::*
openssl	openssl	0.9.8w	cpe:2.3:a:openssl:openssl:0.9.8w:::::::*
openssl	openssl	0.9.8x	cpe:2.3:a:openssl:openssl:0.9.8x:::::::*
openssl	openssl	0.9.8y	cpe:2.3:a:openssl:openssl:0.9.8y:::::::*
openssl	openssl	0.9.8z	cpe:2.3:a:openssl:openssl:0.9.8z:::::::*
openssl	openssl	0.9.8za	cpe:2.3:a:openssl:openssl:0.9.8za:::::::*
openssl	openssl	0.9.8zb	cpe:2.3:a:openssl:openssl:0.9.8zb:::::::*
openssl	openssl	0.9.8zc	cpe:2.3:a:openssl:openssl:0.9.8zc:::::::*
openssl	openssl	0.9.8ze	cpe:2.3:a:openssl:openssl:0.9.8ze:::::::*
openssl	openssl	0.9.8zg	cpe:2.3:a:openssl:openssl:0.9.8zg:::::::*
openssl	openssl	1.0.0	cpe:2.3:a:openssl:openssl:1.0.0:::::::*
openssl	openssl	1.0.0	cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
openssl	openssl	1.0.0	cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
openssl	openssl	1.0.0	cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
openssl	openssl	1.0.0	cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
openssl	openssl	1.0.0	cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
openssl	openssl	1.0.0a	cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
openssl	openssl	1.0.0b	cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
openssl	openssl	1.0.0c	cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
openssl	openssl	1.0.0d	cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
openssl	openssl	1.0.0e	cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
openssl	openssl	1.0.0f	cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
openssl	openssl	1.0.0g	cpe:2.3:a:openssl:openssl:1.0.0g:::::::*
openssl	openssl	1.0.0h	cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
openssl	openssl	1.0.0i	cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
openssl	openssl	1.0.0j	cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
openssl	openssl	1.0.0k	cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
openssl	openssl	1.0.0l	cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
openssl	openssl	1.0.0m	cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
openssl	openssl	1.0.0n	cpe:2.3:a:openssl:openssl:1.0.0n:::::::*
openssl	openssl	1.0.0o	cpe:2.3:a:openssl:openssl:1.0.0o:::::::*
openssl	openssl	1.0.0p	cpe:2.3:a:openssl:openssl:1.0.0p:::::::*
openssl	openssl	1.0.0q	cpe:2.3:a:openssl:openssl:1.0.0q:::::::*
openssl	openssl	1.0.0r	cpe:2.3:a:openssl:openssl:1.0.0r:::::::*
openssl	openssl	1.0.0s	cpe:2.3:a:openssl:openssl:1.0.0s:::::::*
openssl	openssl	1.0.1	cpe:2.3:a:openssl:openssl:1.0.1:::::::*
openssl	openssl	1.0.1	cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
openssl	openssl	1.0.1	cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
openssl	openssl	1.0.1	cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
openssl	openssl	1.0.1a	cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
openssl	openssl	1.0.1b	cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
openssl	openssl	1.0.1c	cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
openssl	openssl	1.0.1d	cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
openssl	openssl	1.0.1e	cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
openssl	openssl	1.0.1f	cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
openssl	openssl	1.0.1g	cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
openssl	openssl	1.0.1h	cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
openssl	openssl	1.0.1i	cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
openssl	openssl	1.0.1j	cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
openssl	openssl	1.0.1k	cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
openssl	openssl	1.0.1l	cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
openssl	openssl	1.0.2	cpe:2.3:a:openssl:openssl:1.0.2:::::::*
openssl	openssl	1.0.2	cpe:2.3:a:openssl:openssl:1.0.2:beta1::::::

References for CVE-2017-3735

URL	Tags
http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/100515	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039726	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:3221
https://access.redhat.com/errata/RHSA-2018:3505
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
https://github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822
https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc
https://security.gentoo.org/glsa/201712-03
https://security.netapp.com/advisory/ntap-20170927-0001/	Issue Tracking Third Party Advisory
https://security.netapp.com/advisory/ntap-20171107-0002/	Issue Tracking Third Party Advisory
https://support.apple.com/HT208331
https://usn.ubuntu.com/3611-2/
https://www.debian.org/security/2017/dsa-4017	Third Party Advisory
https://www.debian.org/security/2017/dsa-4018	Third Party Advisory
https://www.openssl.org/news/secadv/20170828.txt	Patch Vendor Advisory
https://www.openssl.org/news/secadv/20171102.txt	Issue Tracking Vendor Advisory
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://www.tenable.com/security/tns-2017-14	Issue Tracking Third Party Advisory
https://www.tenable.com/security/tns-2017-15

URL

CVE-2017-3735

Exploit prediction scoring system (EPSS) score for CVE-2017-3735

Common vulnerability scoring system (CVSS) metrics for CVE-2017-3735

Weakness enumeration for CVE-2017-3735

OS Trackers for CVE-2017-3735

Affected software / configurations for CVE-2017-3735

References for CVE-2017-3735