Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-7869

Опубликовано: 14 апр. 2017
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

not-affected

2.12.23-12ubuntu2.8
esm-infra/focal

DNE

focal

DNE

groovy

DNE

Показывать по

РелизСтатусПримечание
artful

not-affected

3.5.8-5ubuntu1
bionic

not-affected

3.5.8-5ubuntu1
cosmic

not-affected

3.5.8-5ubuntu1
devel

not-affected

3.5.8-5ubuntu1
disco

not-affected

3.5.8-5ubuntu1
eoan

not-affected

3.5.8-5ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
esm-infra/bionic

not-affected

3.5.8-5ubuntu1
esm-infra/focal

not-affected

3.5.8-5ubuntu1
esm-infra/xenial

not-affected

3.4.10-4ubuntu1.3

Показывать по

EPSS

Процентиль: 71%
0.00699
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
около 8 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

CVSS3: 7.5
nvd
около 8 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

CVSS3: 7.5
debian
около 8 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integ ...

CVSS3: 7.5
github
около 3 лет назад

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

suse-cvrf
почти 8 лет назад

Security update for gnutls

EPSS

Процентиль: 71%
0.00699
Низкий

5 Medium

CVSS2

7.5 High

CVSS3