vulnerability
Huawei EulerOS: CVE-2016-7444: gnutls security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Sep 27, 2016 | Oct 28, 2022 | Nov 27, 2024 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Sep 27, 2016
Added
Oct 28, 2022
Modified
Nov 27, 2024
Description
The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.
Solutions
huawei-euleros-2_0_sp3-upgrade-gnutlshuawei-euleros-2_0_sp3-upgrade-gnutls-c++huawei-euleros-2_0_sp3-upgrade-gnutls-danehuawei-euleros-2_0_sp3-upgrade-gnutls-develhuawei-euleros-2_0_sp3-upgrade-gnutls-utils
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.