CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

We have discovered 191,483 live websites that are affected by CVE-2017-3735.

Run a Free Instant Scan



Affected Software

Product  OpenSSL
Category Web Server Extensions
Vulnerable Domains191,483 live websites (39% of OpenSSL install base)
Vulnerable Versions
  • from 1.0.2 through 1.0.2
  • from 1.1 through 1.1
Vulnerable Versions Count2 versions ( 2.74% of all versions)



Details

  • Published - Aug 28, 2017
  • Updated - Sep 16, 2024

Website Distribution by Country

Number of websites using CVE-2017-3735
United States49,114 websites


Japan17,288 websites
Netherlands15,260 websites
Germany12,863 websites
Czech Republic8,423 websites
Korea, South7,561 websites
Russia5,859 websites
Italy5,770 websites
France5,696 websites
China5,504 websites

Website Distribution by TLD

Number of websites using CVE-2017-3735
.com68,839 websites
.nl12,161 websites
.net8,255 websites
.de7,579 websites
.org7,194 websites
.cz6,717 websites
.jp6,287 websites
.ru4,950 websites
.it4,741 websites
.co.jp3,899 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2017-3735

Top websites that are affected by CVE-2017-3735. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.com United States*,***
********.com United States*,***
*.******.***.***.br Brazil*,***
*.*****.***.***.br Brazil*,***
****.**.com United States*,***
*****.org United States*,***
*****.com United States*,***
*******.in United States*,***
********.biz Japan*,***
********.com United States*,***
See full domain list

FAQ

A total of 191,483 websites have been identified as vulnerable to CVE-2017-3735, based on global website indexing conducted by WebTechSurvey.
The OpenSSL is affected by the CVE-2017-3735 vulnerability.
OpenSSL versions up to and including 1.1 are vulnerable to CVE-2017-3735.

References