CVE-2017-7507

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2017-7507

Severity

Unknown

Description

GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.

References

https://images.chainguard.dev/security/CGA-267j-26qh-54ff
https://github.com/advisories/GHSA-w59v-wh6q-qc58
http://www.debian.org/security/2017/dsa-3884
http://www.securityfocus.com/bid/99102
https://access.redhat.com/errata/RHSA-2017:2292
https://www.gnutls.org/security.html#GNUTLS-SA-2017-4
https://security.alpinelinux.org/vuln/CVE-2017-7507
https://security-tracker.debian.org/tracker/CVE-2017-7507

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2017-7507

Severity

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources