CVE-2017-5337
gnutls: Heap read overflow in read-packet.c
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
Múltiples desbordamientos de búfer basados en memoria dinámica en la función read_attribute en GnuTLS en versiones anteriores a 3.3.26 y 3.5.x en versiones anteriores a 3.5.8 permiten a los atacantes remotos tener un impacto no especificado a través de un certificado OpenPGP manipulado.
Stefan Buehler discovered that GnuTLS incorrectly verified the serial length of OCSP responses. A remote attacker could possibly use this issue to bypass certain certificate validation measures. This issue only applied to Ubuntu 16.04 LTS. Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts. A remote attacker could possibly use this issue to cause GnuTLS to hang, resulting in a denial of service. This issue has only been addressed in Ubuntu 16.04 LTS and Ubuntu 16.10. Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-01-10 CVE Reserved
- 2017-01-13 CVE Published
- 2024-08-05 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-122: Heap-based Buffer Overflow
CAPEC
References (14)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/95372 | Third Party Advisory | |
http://www.securitytracker.com/id/1037576 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html | 2018-10-30 | |
http://rhn.redhat.com/errata/RHSA-2017-0574.html | 2018-10-30 | |
https://access.redhat.com/errata/RHSA-2017:2292 | 2018-10-30 | |
https://gnutls.org/security.html#GNUTLS-SA-2017-2 | 2018-10-30 | |
https://access.redhat.com/security/cve/CVE-2017-5337 | 2017-08-01 | |
https://bugzilla.redhat.com/show_bug.cgi?id=1411836 | 2017-08-01 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 42.1 Search vendor "Opensuse" for product "Leap" and version "42.1" | - |
Affected
| ||||||
Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 42.2 Search vendor "Opensuse" for product "Leap" and version "42.2" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | <= 3.3.25 Search vendor "Gnu" for product "Gnutls" and version " <= 3.3.25" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.0 Search vendor "Gnu" for product "Gnutls" and version "3.5.0" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.1 Search vendor "Gnu" for product "Gnutls" and version "3.5.1" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.2 Search vendor "Gnu" for product "Gnutls" and version "3.5.2" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.3 Search vendor "Gnu" for product "Gnutls" and version "3.5.3" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.4 Search vendor "Gnu" for product "Gnutls" and version "3.5.4" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.5 Search vendor "Gnu" for product "Gnutls" and version "3.5.5" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.6 Search vendor "Gnu" for product "Gnutls" and version "3.5.6" | - |
Affected
| ||||||
Gnu Search vendor "Gnu" | Gnutls Search vendor "Gnu" for product "Gnutls" | 3.5.7 Search vendor "Gnu" for product "Gnutls" and version "3.5.7" | - |
Affected
|