vulnerability
Huawei EulerOS: CVE-2016-7444: gnutls security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Sep 27, 2016 | Oct 28, 2022 | Apr 1, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Sep 27, 2016
Added
Oct 28, 2022
Modified
Apr 1, 2026
Description
The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.
Solutions
huawei-euleros-2_0_sp3-upgrade-gnutlshuawei-euleros-2_0_sp3-upgrade-gnutls-c++huawei-euleros-2_0_sp3-upgrade-gnutls-danehuawei-euleros-2_0_sp3-upgrade-gnutls-develhuawei-euleros-2_0_sp3-upgrade-gnutls-utils
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.