CVE-2016-7444

CWE-264CWE-295 — Improper Certificate Validation13 documents8 sources
Severity
7.5HIGH
EPSS
1.0%
top 22.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Gnutls
Timeline
PublishedSep 27
Latest updateMay 14

Description

The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶Debiangnutls28< 3.5.3-4+3
▶Ubuntugnutls26< 2.12.23-12ubuntu2.7+1
▶Ubuntugnutls28< 3.4.10-4ubuntu1.2
▶NVDgnu/gnutls3.4.14+4

Patches

Patch: gitlab.com ↗Patch: gitlab.com ↗

🔴Vulnerability Details

5
GHSA
GHSA-3ccg-r3xv-q4cg: The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp↗2022-05-14
▶
OSV
gnutls26 vulnerability↗2017-03-20
▶
OSV
gnutls26, gnutls28 vulnerabilities↗2017-02-01
▶
CVEList
CVE-2016-7444: The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp↗2016-09-27
▶
OSV
CVE-2016-7444: The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp↗2016-09-27
▶

📋Vendor Advisories

3
Ubuntu
GnuTLS vulnerabilities↗2017-02-01
▶
Red Hat
gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3)↗2016-09-02
▶
Debian
CVE-2016-7444: gnutls28 - The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4....↗2016
▶

💬Community

4
Bugzilla
CVE-2016-7444 gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3)↗2016-09-08
▶
Bugzilla
CVE-2016-7444 gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3) [fedora-all]↗2016-09-08
▶
Bugzilla
CVE-2016-7444 mingw-gnutls: gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3) [fedora-all]↗2016-09-08
▶
Bugzilla
CVE-2016-7444 mingw-gnutls: gnutls: Incorrect certificate validation when using OCSP responses (GNUTLS-SA-2016-3) [epel-7]↗2016-09-08
▶
CVE-2016-7444 (HIGH CVSS 7.5) | The gnutls_ocsp_resp_check_crt func | cvebase.io