5
CVSSv2

CVE-2017-5335

Published: 24/03/2017 Updated: 30/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The stream reading functions in lib/opencdk/read-packet.c in GnuTLS prior to 3.3.26 and 3.5.x prior to 3.5.8 allow remote malicious users to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

opensuse leap 42.2

opensuse leap 42.1

gnu gnutls 3.5.6

gnu gnutls 3.5.7

gnu gnutls 3.5.1

gnu gnutls 3.5.0

gnu gnutls

gnu gnutls 3.5.4

gnu gnutls 3.5.5

gnu gnutls 3.5.2

gnu gnutls 3.5.3

Vendor Advisories

Synopsis Moderate: gnutls security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for gnutls is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Syst ...
Synopsis Moderate: gnutls security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for gnutls is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Syst ...
GnuTLS could be made to hang if it received specially crafted network traffic ...
Several security issues were fixed in GnuTLS ...
A denial of service flaw was found in the way the TLS/SSL protocol definedprocessing of ALERT packets during a connection handshake A remote attackercould use this flaw to make a TLS/SSL server consume an excessive amount of CPUand fail to accept connections form other clients (CVE-2016-8610) Multiple flaws were found in the way gnutls processed ...
The stream reading functions in lib/opencdk/read-packetc in GnuTLS before 3326 and 35x before 358 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate ...