Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade gnutls | Apr 17, 2017 | Jan 27, 2017 |
| Centos_linux | — | Upgrade gnutls-debuginfoUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-guile | Aug 28, 2019 | Mar 24, 2017 |
| Debian | — | Upgrade gnutls28 | Jul 30, 2024 | Mar 24, 2017 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Oct 30, 2017 | Mar 24, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-c++ | Nov 30, 2017 | Mar 24, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-utils | Nov 30, 2017 | Mar 24, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 24, 2017 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-guileUpgrade gnutls-develUpgrade gnutls-dane | Mar 28, 2017 | Jan 10, 2017 |
| Redhat_linux | — | Upgrade gnutlsUpgrade gnutls-debuginfoUpgrade gnutls-guileUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls-develNo solution existsUpgrade gnutls-dane | Mar 21, 2017 | Jan 27, 2017 |
| Suse | — | Upgrade gnutlsUpgrade libgnutls26-x86Upgrade libgnutls-extra-develUpgrade libgnutls28-32bitUpgrade libgnutls-openssl-develUpgrade libgnutls28Upgrade libgnutls-develUpgrade libgnutls26-32bitUpgrade libgnutls26Upgrade libgnutls-openssl27Upgrade libgnutlsxx-develUpgrade libgnutls-extra26Upgrade libgnutlsxx28 | Jan 28, 2017 | Jan 27, 2017 |
| Ubuntu | — | Upgrade libgnutls30Upgrade libgnutls26 | Feb 2, 2017 | Jan 27, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub