GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-debuginfoUpgrade gnutlsUpgrade gnutls-devel | Aug 28, 2019 | Apr 14, 2017 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Apr 14, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-dane | Nov 30, 2017 | Apr 14, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutls | Nov 30, 2017 | Apr 14, 2017 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-develUpgrade gnutls-c++ | Aug 8, 2017 | Apr 14, 2017 |
| Redhat_linux | — | Upgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-daneNo solution existsUpgrade gnutls-debuginfo | Aug 4, 2017 | Apr 14, 2017 |
| Suse | — | Upgrade gnutlsUpgrade libgnutls26Upgrade libgnutls30-hmac-32bitUpgrade libgnutlsxx28Upgrade libgnutls26-x86Upgrade libgnutls-extra26Upgrade libgnutls30Upgrade libgnutls-dane0Upgrade libgnutls30-32bitUpgrade libgnutls-openssl-develUpgrade libgnutls-extra-develUpgrade libgnutls30-hmacUpgrade libgnutls-openssl27Upgrade libgnutls28Upgrade libgnutls26-32bitUpgrade libgnutls-develUpgrade libgnutls28-32bitUpgrade libgnutlsxx-devel | Jul 11, 2017 | Apr 14, 2017 |
| Ubuntu | — | Upgrade libgnutls26Upgrade libgnutls30 | Jun 14, 2017 | Apr 14, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub