CVE catalog
CVE-2017-3736
openssl: CVE-2017-3736
- Severity
- High · CVSS 7.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 10.13% · Oct 25, 2026
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | fixed |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u2 | fixed |
| Alpine | openssl | 3.3 | 1.0.2m-r0 | fixed |
| Alpine | openssl | 3.4 | 1.0.2m-r0 | fixed |
| Alpine | openssl | 3.5 | 1.0.2m-r0 | fixed |
| Alpine | openssl | 3.6 | 1.0.2m-r0 | fixed |
| Alpine | openssl | 3.7 | 1.0.2m-r0 | fixed |
| Alpine | openssl | 3.8 | 1.0.2m-r0 | fixed |
| Ubuntu | openssl | 16.04 | 1.0.2d-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2d-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2e-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2f-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4.1 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4.2 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4.4 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4.5 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4.6 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4.8 | vulnerable |
| Ubuntu | openssl | 16.04 | 1.0.2g-1ubuntu4.9 | fixed |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu14 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 1.1.0g-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 1.1.0g-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 1.1.0g-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 1.1.0g-1 | not yet assigned | Not reported | Not reported |
| Alpine | openssl | apk | 3.3 | 1.0.2m-r0 | Not reported | ALPINE-CVE-2017-3736 | Not reported |
| Alpine | openssl | apk | 3.4 | 1.0.2m-r0 | Not reported | ALPINE-CVE-2017-3736 | Not reported |
| Alpine | openssl | apk | 3.5 | 1.0.2m-r0 | Not reported | ALPINE-CVE-2017-3736 | Not reported |
| Alpine | openssl | apk | 3.6 | 1.0.2m-r0 | Not reported | ALPINE-CVE-2017-3736 | Not reported |
| Alpine | openssl | apk | 3.7 | 1.0.2m-r0 | Not reported | ALPINE-CVE-2017-3736 | Not reported |
| Alpine | openssl | apk | 3.8 | 1.0.2m-r0 | Not reported | ALPINE-CVE-2017-3736 | Not reported |
| Ubuntu | openssl | deb | 16.04 | 1.0.2g-1ubuntu4.9 | Not reported | UBUNTU-CVE-2017-3736 | Not reported |
| Ubuntu | openssl | deb | 18.04 | 1.0.2g-1ubuntu14 | Not reported | UBUNTU-CVE-2017-3736 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libssl3]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- [libssl-dev]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- [libssl-doc]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
- [openssl]Unknown
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
1.1.0g-1dsa · openssl · debian · bookworm; dsa · openssl · debian · 12
[Debian 13 (Trixie)]
- [libssl3t64]Unknown
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
- [libssl-dev]Unknown
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
- [libssl-doc]Unknown
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· all · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· all · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· all · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u3· all · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
- [openssl]Unknown
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
- [openssl-provider-fips]Unknown
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
- [openssl-provider-legacy]Unknown
Source package: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityFixed · Fixed:
1.1.0g-1dsa · openssl · debian · 13
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2018_0998.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2017-3736]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2017-3736]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2017-3736]
- [https://security-tracker.debian.org/tracker/CVE-2017-3736]
- [https://security.access.redhat.com/data/csaf/v2/vex/2017/cve-2017-3736.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1594.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]