CVE-2017-7507

published 2017-06-16

CVE-2017-7507: GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	gnutls28	< gnutls28 3.5.8-6 (bookworm)	gnutls28 3.5.8-6 (bookworm)
gnu	gnutls	<= 3.5.12	—
gnutls	gnutls	—	—

CVSS provenance

nvd v3.0 7.5 HIGH CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

osv 7.5 HIGH

CWE-476