GnuTLS GNUTLS-SA-2017-3 Multiple Security Vulnerabilities

GnuTLS is prone to multiple security vulnerabilities.

Successful exploits may allow attackers to execute arbitrary code, disclose sensitive information or cause denial-of-service conditions.

Information

Bugtraq ID: 97040
Class: Unknown
CVE: CVE-2017-7869

Remote: Yes
Local: No
Published: Mar 23 2017 12:00AM
Updated: Apr 17 2017 11:05AM
Credit: The vendor reported this issue.
Vulnerable: GNU GnuTLS 3.5.4
GNU GnuTLS 3.5.3
GNU GnuTLS 3.5
GNU GnuTLS 3.4.15
GNU GnuTLS 3.4.14
GNU GnuTLS 3.4.13
GNU GnuTLS 3.4.12
GNU GnuTLS 3.4.4
GNU GnuTLS 3.3.24
GNU GnuTLS 3.3.23
GNU GnuTLS 3.3.17
GNU GnuTLS 3.3.14
GNU GnuTLS 3.3.13
GNU GnuTLS 3.3.12
GNU GnuTLS 3.3.11
GNU GnuTLS 3.3.10
GNU GnuTLS 3.3.9
GNU GnuTLS 3.3.8
GNU GnuTLS 3.3.7
GNU GnuTLS 3.3.6
GNU GnuTLS 3.3.5
GNU GnuTLS 3.3.4
GNU GnuTLS 3.3.3
GNU GnuTLS 3.3
GNU GnuTLS 3.2.21
GNU GnuTLS 3.2.20
GNU GnuTLS 3.2.19
GNU GnuTLS 3.2.15
GNU GnuTLS 3.2.13
GNU GnuTLS 3.2.12
GNU GnuTLS 3.2.11
GNU GnuTLS 3.2.10
GNU GnuTLS 3.2.6
GNU GnuTLS 3.1.28
GNU GnuTLS 3.1.25
GNU GnuTLS 3.1.22
GNU GnuTLS 3.1.21
GNU GnuTLS 3.1.20
GNU GnuTLS 3.1.16
GNU GnuTLS 3.1.13
GNU GnuTLS 3.1.12
GNU GnuTLS 3.0.26
GNU GnuTLS 3.0.25
GNU GnuTLS 3.0.24
GNU GnuTLS 3.0.23
GNU GnuTLS 3.0.1
GNU GnuTLS 2.12.22
GNU GnuTLS 2.12.21
GNU GnuTLS 2.12.20
GNU GnuTLS 2.12.17
GNU GnuTLS 2.12.11
GNU GnuTLS 2.12.8
GNU GnuTLS 2.12.6
GNU GnuTLS 2.12.5
GNU GnuTLS 2.12.4
GNU GnuTLS 2.12.3
GNU GnuTLS 2.12.2
GNU GnuTLS 2.10.3
GNU GnuTLS 2.10.1
GNU GnuTLS 2.8.3
GNU GnuTLS 2.8.2
GNU GnuTLS 2.8.1
GNU GnuTLS 2.7.6
GNU GnuTLS 2.7.5
GNU GnuTLS 2.6.6
GNU GnuTLS 2.6.5
GNU GnuTLS 2.6.4
GNU GnuTLS 2.6.3
GNU GnuTLS 2.6.2
GNU GnuTLS 2.6.1
GNU GnuTLS 2.6
GNU GnuTLS 2.4.1
GNU GnuTLS 2.4
GNU GnuTLS 2.2.5
GNU GnuTLS 2.2.4
GNU GnuTLS 2.2.3
GNU GnuTLS 2.2.2
GNU GnuTLS 2.2.1
GNU GnuTLS 2.2
GNU GnuTLS 2.0
GNU GnuTLS 1.7.17
GNU GnuTLS 1.7.16
GNU GnuTLS 1.4.3
GNU GnuTLS 1.4.2
GNU GnuTLS 1.4
GNU GnuTLS 1.3.4
GNU GnuTLS 1.3.3
GNU GnuTLS 1.3.2
GNU GnuTLS 1.3.1
GNU GnuTLS 1.3
GNU GnuTLS 1.2.10
GNU GnuTLS 1.2.9
GNU GnuTLS 1.2.8
GNU GnuTLS 1.2.7
GNU GnuTLS 1.2.6
GNU GnuTLS 1.2.5
GNU GnuTLS 1.2.4
GNU GnuTLS 1.2.3
GNU GnuTLS 1.2.2
GNU GnuTLS 1.2.1
GNU GnuTLS 1.2
GNU GnuTLS 1.0.25
GNU GnuTLS 1.0.23
GNU GnuTLS 1.0.20
GNU GnuTLS 1.0.17
GNU GnuTLS 1.0.16
GNU GnuTLS 1.0.15
GNU GnuTLS 1.0.14
GNU GnuTLS 1.0.13
GNU GnuTLS 1.0.9
GNU GnuTLS 1.0.8
GNU GnuTLS 1.0.7
GNU GnuTLS 1.0.6
GNU GnuTLS 1.0.5
GNU GnuTLS 1.0.4
GNU GnuTLS 1.0.3
GNU GnuTLS 1.0.2
GNU GnuTLS 1.0.1
GNU GnuTLS 1.0
GNU GnuTLS 3.5.8
GNU GnuTLS 3.4.1
GNU GnuTLS 3.3.26
GNU GnuTLS 3.3.2
GNU GnuTLS 3.3.15
GNU GnuTLS 3.3.1
GNU GnuTLS 3.2.9
GNU GnuTLS 3.2.8.1
GNU GnuTLS 3.2.8
GNU GnuTLS 3.2.7
GNU GnuTLS 3.2.5
GNU GnuTLS 3.2.4
GNU GnuTLS 3.2.3
GNU GnuTLS 3.2.2
GNU GnuTLS 3.2.14
GNU GnuTLS 3.2.12.1
GNU GnuTLS 3.2.1
GNU GnuTLS 3.2.0
GNU GnuTLS 3.1.9
GNU GnuTLS 3.1.8
GNU GnuTLS 3.1.7
GNU GnuTLS 3.1.6
GNU GnuTLS 3.1.5
GNU GnuTLS 3.1.4
GNU GnuTLS 3.1.3
GNU GnuTLS 3.1.24
GNU GnuTLS 3.1.23
GNU GnuTLS 3.1.2
GNU GnuTLS 3.1.19
GNU GnuTLS 3.1.18
GNU GnuTLS 3.1.17
GNU GnuTLS 3.1.15
GNU GnuTLS 3.1.14
GNU GnuTLS 3.1.11
GNU GnuTLS 3.1.10
GNU GnuTLS 3.1.1
GNU GnuTLS 3.1.0
GNU GnuTLS 3.0.9
GNU GnuTLS 3.0.8
GNU GnuTLS 3.0.7
GNU GnuTLS 3.0.6
GNU GnuTLS 3.0.5
GNU GnuTLS 3.0.4
GNU GnuTLS 3.0.3
GNU GnuTLS 3.0.28
GNU GnuTLS 3.0.27
GNU GnuTLS 3.0.22
GNU GnuTLS 3.0.21
GNU GnuTLS 3.0.20
GNU GnuTLS 3.0.2
GNU GnuTLS 3.0.19
GNU GnuTLS 3.0.18
GNU GnuTLS 3.0.17
GNU GnuTLS 3.0.16
GNU GnuTLS 3.0.15
GNU GnuTLS 3.0.14
GNU GnuTLS 3.0.13
GNU GnuTLS 3.0.12
GNU GnuTLS 3.0.11
GNU GnuTLS 3.0.10
GNU GnuTLS 3.0.0
GNU GnuTLS 2.9.10
GNU GnuTLS 2.8.6
GNU GnuTLS 2.8.5
GNU GnuTLS 2.8.4
GNU GnuTLS 2.8.0
GNU GnuTLS 2.7.4
GNU GnuTLS 2.7.3
GNU GnuTLS 2.7.2
GNU GnuTLS 2.7.1
GNU GnuTLS 2.7.0
GNU GnuTLS 2.5.0
GNU GnuTLS 2.4.3
GNU GnuTLS 2.3.8
GNU GnuTLS 2.3.7
GNU GnuTLS 2.3.6
GNU GnuTLS 2.3.5
GNU GnuTLS 2.3.4
GNU GnuTLS 2.3.3
GNU GnuTLS 2.3.2
GNU GnuTLS 2.3.11
GNU GnuTLS 2.3.10
GNU GnuTLS 2.3.1
GNU GnuTLS 2.3.0
GNU GnuTLS 2.12.9
GNU GnuTLS 2.12.7
GNU GnuTLS 2.12.6.1
GNU GnuTLS 2.12.23
GNU GnuTLS 2.12.19
GNU GnuTLS 2.12.18
GNU GnuTLS 2.12.16
GNU GnuTLS 2.12.15
GNU GnuTLS 2.12.14
GNU GnuTLS 2.12.13
GNU GnuTLS 2.12.12
GNU GnuTLS 2.12.10
GNU GnuTLS 2.12.1
GNU GnuTLS 2.12.0
GNU GnuTLS 2.10.5
GNU GnuTLS 2.10.4
GNU GnuTLS 2.10.2
GNU GnuTLS 2.10.0
GNU GnuTLS 2.1.8
GNU GnuTLS 2.1.7
GNU GnuTLS 2.1.6
GNU GnuTLS 2.1.5
GNU GnuTLS 2.1.4
GNU GnuTLS 2.1.3
GNU GnuTLS 2.1.2
GNU GnuTLS 2.1.1
GNU GnuTLS 2.1.0
GNU GnuTLS 2.0.4
GNU GnuTLS 2.0.3
GNU GnuTLS 2.0.2
GNU GnuTLS 2.0.1
GNU GnuTLS 1.7.9
GNU GnuTLS 1.7.8
GNU GnuTLS 1.7.7
GNU GnuTLS 1.7.6
GNU GnuTLS 1.7.5
GNU GnuTLS 1.7.4
GNU GnuTLS 1.7.3
GNU GnuTLS 1.7.2
GNU GnuTLS 1.7.19
GNU GnuTLS 1.7.18
GNU GnuTLS 1.7.15
GNU GnuTLS 1.7.14
GNU GnuTLS 1.7.13
GNU GnuTLS 1.7.12
GNU GnuTLS 1.7.11
GNU GnuTLS 1.7.10
GNU GnuTLS 1.7.1
GNU GnuTLS 1.7.0
GNU GnuTLS 1.6.3
GNU GnuTLS 1.6.2
GNU GnuTLS 1.6.1
GNU GnuTLS 1.6.0
GNU GnuTLS 1.5.5
GNU GnuTLS 1.5.4
GNU GnuTLS 1.5.3
GNU GnuTLS 1.5.2
GNU GnuTLS 1.5.1
GNU GnuTLS 1.5.0
GNU GnuTLS 1.4.5
GNU GnuTLS 1.4.4
GNU GnuTLS 1.1.13

Not Vulnerable: GNU GnuTLS 3.5.10

References:

• GnuTLS Home Page (GnuTLS )
  
• cdk_pkt_read: enforce packet limits (gnutls)
  
• GNUTLS-SA-2017-3 (GNUTLS)
  
• gnutls: Heap-buffer-overflow in cdk_pkt_read (chromium)
  

Source: www.securityfocus.com