The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade gnutls | Apr 17, 2017 | Jan 27, 2017 |
| Centos_linux | — | Upgrade gnutls-debuginfoUpgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-guileUpgrade gnutls | Aug 28, 2019 | Mar 24, 2017 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 24, 2017 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Mar 24, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-devel | Nov 30, 2017 | Mar 24, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-c++ | Nov 30, 2017 | Mar 24, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 24, 2017 |
| Oracle_linux | — | Upgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-guile | Mar 28, 2017 | Jan 10, 2017 |
| Redhat_linux | — | Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-guileNo solution exists | Mar 21, 2017 | Jan 27, 2017 |
| Suse | — | Upgrade libgnutls26Upgrade libgnutls-openssl27Upgrade libgnutls-extra-develUpgrade gnutlsUpgrade libgnutls-extra26Upgrade libgnutls-openssl-develUpgrade libgnutlsxx28Upgrade libgnutls26-x86Upgrade libgnutls26-32bitUpgrade libgnutls28Upgrade libgnutls28-32bitUpgrade libgnutlsxx-develUpgrade libgnutls-devel | Jan 28, 2017 | Jan 27, 2017 |
| Ubuntu | — | Upgrade libgnutls26Upgrade libgnutls30 | Feb 2, 2017 | Jan 27, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub