CVE-2017-7507

2017-06-1619:00:00

redhat

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.285

Percentile

96.9%

JSON

GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.

CNA Affected

[
  {
    "product": "gnutls",
    "vendor": "GnuTLS",
    "versions": [
      {
        "status": "affected",
        "version": "3.5.12"
      }
    ]
  }
]