GNU GnuTLS 3.5.2
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:gnutls:3.5.2:*:*:*:*:*:*:*
part: a version: 3.5.2 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Gnutls (955d43fd-13b7-57ed-9845-207af9eef570) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gnutls/gnutls |
purl2cpe | 2026-06-01 10:11:56.108525 |
pkg:gitlab/gnutls/gnutls |
purl2cpe | 2026-06-01 10:11:56.108526 |
pkg:gnu/gnutls |
purl2cpe | 2026-06-01 10:11:56.108528 |
pkg:rpm/fedora/gnutls |
purl2cpe | 2026-06-01 10:11:56.108529 |
pkg:rpm/opensuse/gnutls |
purl2cpe | 2026-06-01 10:11:56.108530 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-5337 |
vulnerable | 2026-06-08 05:09:39.459013 |
Details available
Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
Published: 2017-03-24T15:00:00.000Z
Updated: 2024-08-05T14:55:35.701Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5336 |
vulnerable | 2026-06-08 05:09:39.458301 |
Details available
Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.
Published: 2017-03-24T15:00:00.000Z
Updated: 2024-08-05T14:55:35.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5335 |
vulnerable | 2026-06-08 05:09:39.457576 |
Details available
The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.
Published: 2017-03-24T15:00:00.000Z
Updated: 2024-08-05T14:55:35.773Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5334 |
vulnerable | 2026-06-08 05:09:39.454332 |
Details available
Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.
Published: 2017-03-24T15:00:00.000Z
Updated: 2024-08-05T14:55:35.773Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7444 |
vulnerable | 2026-06-08 05:08:12.656287 |
Details available
The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.
Published: 2016-09-27T15:00:00.000Z
Updated: 2024-08-06T01:57:47.621Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.