Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-7869

Опубликовано: 14 апр. 2017
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
Версия до 3.5.9 (включая)

EPSS

Процентиль: 71%
0.00699
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 8 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

CVSS3: 8.1
redhat
около 8 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

CVSS3: 7.5
debian
около 8 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integ ...

CVSS3: 7.5
github
около 3 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

suse-cvrf
почти 8 лет назад

Security update for gnutls

EPSS

Процентиль: 71%
0.00699
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787