CVE-2017-5334
Fixed in a distro release EPSS 33%
Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.
Products: opensuse leap, gnutls
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gnutls28 | 3.5.8-1 |
| Debian 13 | gnutls28 | 3.5.8-1 |
| Debian 14 | gnutls28 | 3.5.8-1 |
| Red Hat Enterprise Linux 7 | gnutls | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-c++ | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-dane | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-debuginfo | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-devel | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-utils | 0:3.3.26-9.el7 |
| Ubuntu 14.04 LTS | gnutls26 | 2.12.23-12ubuntu2.6 |
| Ubuntu 16.04 LTS | gnutls28 | 3.4.10-4ubuntu1.2 |