CVE-2017-7507

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2017-7507

Severity

7.5

High

CVSS CVSS_V3

Description

GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.

References

https://images.chainguard.dev/security/CGA-267j-26qh-54ff
https://github.com/advisories/GHSA-w59v-wh6q-qc58
http://www.debian.org/security/2017/dsa-3884
http://www.securityfocus.com/bid/99102
https://access.redhat.com/errata/RHSA-2017:2292
https://www.gnutls.org/security.html#GNUTLS-SA-2017-4
https://security.alpinelinux.org/vuln/CVE-2017-7507
https://security-tracker.debian.org/tracker/CVE-2017-7507

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal