[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwhWxnzcMgo_XdQEvphUXoswWHCUzx03G8An0v_YBSPc":3,"g5a-risk:CVE-2017-1000385":217},{"success":4,"data":5,"meta":215},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":61,"references":62,"referencesCount":141,"weaknesses":142,"weaknessesCount":151,"isActivelyExploited":152,"cisaInfo":15,"otxData":15,"relatedBlogPosts":153,"seoMetadata":154,"configurations":179,"relatedVendorCves":199,"notableEvents":200},"CVE-2017-1000385","What is CVE-2017-1000385?","The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).","The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt conte...","2017-12-12T21:29:00.213","2025-04-20T01:37:25.86",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.22098,[38,38,38,38,38,38,38],"Medium",[42,47,50,53,58],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"erlang","erlang\\\u002Fotp","18.3.4.7","cpe:2.3:a:erlang:erlang\\\u002Fotp:18.3.4.7:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"19.3.6.4","cpe:2.3:a:erlang:erlang\\\u002Fotp:19.3.6.4:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":51,"criteria":52,"vulnerable":4},"20.1.7","cpe:2.3:a:erlang:erlang\\\u002Fotp:20.1.7:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":59,"criteria":60,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",5,[63,70,73,76,82,86,89,92,95,99,103,107,110,115,117,119,121,123,125,127,129,131,133,135,137,139],{"url":64,"source":65,"tags":66},"http:\u002F\u002Ferlang.org\u002Fpipermail\u002Ferlang-questions\u002F2017-November\u002F094255.html","Erlang",[67,68,69],"Issue Tracking","Mailing List","Vendor Advisory",{"url":71,"source":65,"tags":72},"http:\u002F\u002Ferlang.org\u002Fpipermail\u002Ferlang-questions\u002F2017-November\u002F094256.html",[67,68,69],{"url":74,"source":65,"tags":75},"http:\u002F\u002Ferlang.org\u002Fpipermail\u002Ferlang-questions\u002F2017-November\u002F094257.html",[67,68,69],{"url":77,"source":78,"tags":79},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F102197","Securityfocus",[80,81],"Third Party Advisory","VDB Entry",{"url":83,"source":84,"tags":85},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0242","Red Hat",[],{"url":87,"source":84,"tags":88},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0303",[],{"url":90,"source":84,"tags":91},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0368",[],{"url":93,"source":84,"tags":94},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0528",[],{"url":96,"source":97,"tags":98},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2017\u002F12\u002Fmsg00010.html","Debian",[],{"url":100,"source":101,"tags":102},"https:\u002F\u002Frobotattack.org\u002F","Robotattack",[67,80],{"url":104,"source":105,"tags":106},"https:\u002F\u002Fusn.ubuntu.com\u002F3571-1\u002F","Ubuntu",[],{"url":108,"source":97,"tags":109},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-4057",[67,80],{"url":111,"source":112,"tags":113},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F144389","Cert",[67,80,114],"US Government Resource",{"url":64,"source":65,"tags":116},[67,68,69],{"url":71,"source":65,"tags":118},[67,68,69],{"url":74,"source":65,"tags":120},[67,68,69],{"url":77,"source":78,"tags":122},[80,81],{"url":83,"source":84,"tags":124},[],{"url":87,"source":84,"tags":126},[],{"url":90,"source":84,"tags":128},[],{"url":93,"source":84,"tags":130},[],{"url":96,"source":97,"tags":132},[],{"url":100,"source":101,"tags":134},[67,80],{"url":104,"source":105,"tags":136},[],{"url":108,"source":97,"tags":138},[67,80],{"url":111,"source":112,"tags":140},[67,80,114],26,[143],{"id":144,"name":145,"description":146,"extendedDescription":147,"status":148,"abstraction":149,"structure":150},"CWE-203","Observable Discrepancy","The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.","Discrepancies can take many forms, and variations may be detectable in timing, control flow, communications such as replies or requests, or general behavior. These discrepancies can reveal information about the product's operation or internal state to an unauthorized actor. In some cases, discrepancies can be used by attackers to form a side channel.","Incomplete","Base","Simple",1,false,[],{"title":155,"metaDescription":156,"keywords":157,"canonicalUrl":158,"structuredData":159},"What is CVE-2017-1000385? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-1000385, a medium severity cyber security vulnerability from 2017. The Erlang otp TLS server answers with different TLS al...","CVE-2017-1000385, CVE-2017-1000385 vulnerability, CVE-2017-1000385 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, erlang security, debian security, erlang\\\u002Fotp vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-1000385",{"@context":160,"@type":161,"headline":155,"description":156,"datePublished":10,"dateModified":11,"author":162,"publisher":166,"about":170,"mainEntityOfPage":174,"articleSection":177,"keywords":178},"https:\u002F\u002Fschema.org","TechArticle",{"@type":163,"name":164,"url":165},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":163,"name":164,"url":165,"logo":167},{"@type":168,"url":169},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":171,"name":6,"description":172,"additionalType":173},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":175,"@id":176},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-1000385","Cybersecurity","CVE-2017-1000385, CVE-2017-1000385 vulnerability, CVE-2017-1000385 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[180,191],{"Operator":15,"Negate":15,"Nodes":181},[182],{"Operator":183,"Negate":15,"CPEMatch":184},"OR",[185,187,189],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":186,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4CDBB4D0-83D2-4E45-B610-2E2185A30CC1",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":188,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1333ABAF-7DD7-4990-AB9B-CA143F6F80F6",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8567201B-AFAD-41B3-9FBB-ED03D10D8882",{"Operator":15,"Negate":15,"Nodes":192},[193],{"Operator":183,"Negate":15,"CPEMatch":194},[195,197],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":196,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":198,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[201,208],{"id":202,"eventType":203,"eventTime":204,"details":205,"label":206,"color":207},"bf3fe627-ce93-48b5-a900-3430325afb78","LOW_EPSS_DELTA","2025-07-02T04:12:11.480447+00:00","Daily EPSS score decreased by 0.103 on 2023-12-30","EPSS Score Decreased","green",{"id":209,"eventType":210,"eventTime":211,"details":212,"label":213,"color":214},"398c8d75-ffde-40cb-8c6e-62bb1e205372","HIGH_EPSS_DELTA","2025-07-05T04:06:10.313418+00:00","Daily EPSS score increased by 0.103 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":216,"version":32},1792249097493,{"score":218,"band":219,"action":220,"scoredAt":221},31,"Low","Monitor","2026-10-16T06:43:03.065667+00:00"]