Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5335

Опубликовано: 10 янв. 2017
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5gnutlsWill not fix
Red Hat Enterprise Linux 6gnutlsFixedRHSA-2017:057421.03.2017
Red Hat Enterprise Linux 7gnutlsFixedRHSA-2017:229201.08.2017

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1412235gnutls: Out of memory while parsing crafted OpenPGP certificate

EPSS

Процентиль: 91%
0.06764
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 8 лет назад

The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.

CVSS3: 7.5
nvd
больше 8 лет назад

The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.

CVSS3: 7.5
debian
больше 8 лет назад

The stream reading functions in lib/opencdk/read-packet.c in GnuTLS be ...

CVSS3: 7.5
github
около 3 лет назад

The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.

suse-cvrf
больше 8 лет назад

Security update for gnutls

EPSS

Процентиль: 91%
0.06764
Низкий

5.3 Medium

CVSS3