{"id":"CVE-2017-3730","published":"2017-05-04T19:00:00Z","modified":"2024-09-16T17:48:53Z","title":"Bad (EC)DHE parameters cause a client crash","vendor":"OpenSSL","product":"OpenSSL","tier":"core","eol":null,"affectedVersions":[{"vendor":"OpenSSL","product":"OpenSSL","versions":["openssl-1.1.0","openssl-1.1.0a","openssl-1.1.0b","openssl-1.1.0c"]}],"description":{"text":"In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in OpenSSL's TLS client-side handling of DHE and ECDHE key exchange parameters, where affected releases before 1.1.0d fail to validate them properly. A malicious server that supplies bad parameters during a DHE or ECDHE handshake can cause the client to dereference a NULL pointer and crash, a denial-of-service condition.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:21:24Z"},"cvss":null,"epss":{"score":0.55294,"percentile":0.99027,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/41192/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.securityfocus.com/bid/95812","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://github.com/openssl/openssl/commit/efbe126e3ebb9123ac9d058aa2bb044261342aaa","tags":["x_refsource_MISC"]},{"url":"https://www.openssl.org/news/secadv/20170126.txt","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1037717","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM"]},{"url":"https://security.gentoo.org/glsa/201702-07","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03838en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-12847","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-12847","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":41192,"url":"https://www.exploit-db.com/exploits/41192","title":"OpenSSL 1.1.0 - Remote Client Denial of Service","type":"dos","platform":"multiple","date":"2017-01-26","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2017-01-26"},"pocGithub":{"count":1,"skipped":0,"earliest":"2017-04-10","earliestUrl":"https://github.com/HavocParasite/CVE-2017-3730","repos":[{"name":"HavocParasite/CVE-2017-3730","url":"https://github.com/HavocParasite/CVE-2017-3730","stars":0,"created":"2017-04-10"}]},"first":{"date":"2017-01-26","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/41192"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/41192/"],"flow":[],"timeline":[{"date":"2017-01-26","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-41192); later: PoC-in-GitHub 2017-04-10","url":"https://www.exploit-db.com/exploits/41192","provenance":"source"},{"date":"2017-05-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-3730","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.81,"detail":"percentile 0.9903"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}