CVE-2017-5337
Fixed in a distro release EPSS 6%
Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
Products: opensuse leap, gnutls
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gnutls28 | 3.5.8-1 |
| Debian 13 | gnutls28 | 3.5.8-1 |
| Debian 14 | gnutls28 | 3.5.8-1 |
| Red Hat Enterprise Linux 6 | gnutls | 0:2.12.23-21.el6 |
| Red Hat Enterprise Linux 6 | gnutls-debuginfo | 0:2.12.23-21.el6 |
| Red Hat Enterprise Linux 6 | gnutls-devel | 0:2.12.23-21.el6 |
| Red Hat Enterprise Linux 6 | gnutls-guile | 0:2.12.23-21.el6 |
| Red Hat Enterprise Linux 6 | gnutls-utils | 0:2.12.23-21.el6 |
| Red Hat Enterprise Linux 7 | gnutls | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-c++ | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-dane | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-debuginfo | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-devel | 0:3.3.26-9.el7 |
| Red Hat Enterprise Linux 7 | gnutls-utils | 0:3.3.26-9.el7 |
| SUSE Linux Enterprise Desktop 12 SP1 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise High Availability Extension 11 SP4 | gnutls | 2.4.1-24.39.67.1 |
| SUSE Linux Enterprise Server 11 SP4 | gnutls | 2.4.1-24.39.67.1 |
| SUSE Linux Enterprise Server 12 SP1 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise Server 12 SP2 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | gnutls | 2.4.1-24.39.67.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | gnutls | 2.4.1-24.39.67.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | gnutls | 3.2.15-16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | gnutls | 3.2.15-16.1 |
| Ubuntu 14.04 LTS | gnutls26 | 2.12.23-12ubuntu2.6 |
| Ubuntu 16.04 LTS | gnutls28 | 3.4.10-4ubuntu1.2 |