Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
No source has published a CVSS score for this record yet.
- CISA KEV Not listed.
- EPSS 0.21, the 97th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- www.securitytracker.com/id/1039726
- usn.ubuntu.com/3611-2/
- www.debian.org/security/2017/dsa-4018
- security.gentoo.org/glsa/201712-03
- lists.debian.org/debian-lts-announce/2017/11/msg00011.html
- access.redhat.com/errata/RHSA-2018:3505
- www.debian.org/security/2017/dsa-4017
- access.redhat.com/errata/RHSA-2018:3221
- www.securityfocus.com/bid/100515
- security.FreeBSD.org/advisories/FreeBSD-SA-17:11.openssl.asc
- www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
- www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
- www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
- www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- www.oracle.com//security-alerts/cpujul2021.html
- security.netapp.com/advisory/ntap-20171107-0002/
- support.apple.com/HT208331
- github.com/openssl/openssl/commit/068b963bb7afc57f5bdd723de0dd15e7795d5822
- security.netapp.com/advisory/ntap-20170927-0001/
- www.tenable.com/security/tns-2017-15
- www.openssl.org/news/secadv/20171102.txt
- www.tenable.com/security/tns-2017-14
- www.openssl.org/news/secadv/20170828.txt
- cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf