CVE-2017-7507

Synopsis Moderate: gnutls security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for gnutls is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Syst ...

Debian Bug report logs - #864560 gnutls28: CVE-2017-7507 Package: src:gnutls28; Maintainer for src:gnutls28 is Debian GnuTLS Maintainers <pkg-gnutls-maint@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 10 Jun 2017 17:24:01 UTC Severity: important Tags: fixed-upstream, patch ...

Several security issues were fixed in GnuTLS ...

Hubert Kario discovered that GnuTLS, a library implementing the TLS and SSL protocols, does not properly decode a status response TLS extension, allowing a remote attacker to cause an application using the GnuTLS library to crash (denial of service) For the stable distribution (jessie), this problem has been fixed in version 338-6+deb8u6 For th ...

GnuTLS version 3512 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents This could lead to a crash of the GnuTLS server application ...