Lucene search
PRIOn knowledge basePRION:CVE-2016-7444HistorySep 27, 2016 - 3:59 p.m.
Design/Logic Flaw
2016-09-2715:59:00
PRIOn knowledge base
www.prio-n.com
9
The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.
References
lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html
www.securityfocus.com/bid/92893
access.redhat.com/errata/RHSA-2017:2292
gitlab.com/gnutls/gnutls/commit/964632f37dfdfb914ebc5e49db4fa29af35b1de9
lists.gnupg.org/pipermail/gnutls-devel/2016-September/008146.html
www.gnutls.org/security.html
Related
ubuntucve
ubuntucve
CVE-2016-7444
2016-09-27 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2022-2609)
2022-10-28 00:00:00
Mageia: Security Advisory (MGASA-2016-0326)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:0348-1)
2021-04-19 00:00:00
nessus
nessus
Fedora 23 : gnutls (2016-2edb9adec8)
2016-09-15 00:00:00
Fedora 25 : gnutls (2016-cafdfdf58c)
2016-11-15 00:00:00
Fedora 24 : gnutls (2016-e1589894e8)
2016-09-15 00:00:00
archlinux
archlinux
[ASA-201609-25] gnutls: certificate verification bypass
2016-09-26 00:00:00
[ASA-201609-26] lib32-gnutls: certificate verification bypass
2016-09-26 00:00:00
nvd
nvd
CVE-2016-7444
2016-09-27 15:59:12
redhatcve
redhatcve
CVE-2016-7444
2016-09-19 09:48:36
alpinelinux
alpinelinux
CVE-2016-7444
2016-09-27 15:59:12
cvelist
cvelist
CVE-2016-7444
2016-09-27 15:00:00
cve
cve
CVE-2016-7444
2016-09-27 15:59:12
mageia
mageia
Updated gnutls packages fix security vulnerability
2016-09-28 08:59:24
debiancve
debiancve
CVE-2016-7444
2016-09-27 15:59:12
suse
suse
Security update for gnutls (important)
2017-02-04 15:07:24
Security update for gnutls (important)
2017-02-01 12:09:23
photon
photon
ubuntu
ubuntu
GnuTLS vulnerability
2017-03-20 00:00:00
GnuTLS vulnerabilities
2017-02-01 00:00:00
cloudfoundry
cloudfoundry
USN-3183-1: GnuTLS Vulnerabilities | Cloud Foundry
2017-03-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1847
2021-07-02 16:58:09
oraclelinux
oraclelinux
gnutls security, bug fix, and enhancement update
2017-08-07 00:00:00
ibm
ibm
redhat
redhat
(RHSA-2017:2292) Moderate: gnutls security, bug fix, and enhancement update
2017-08-01 03:48:16
centos
centos
gnutls security update
2017-08-24 01:37:44