CVE

Id
102155  
CVE No.
CVE-2017-5335  
Status
Candidate  
Description
The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.  
Phase
Assigned (20170110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
804691 102155 CVE-2017-5335 MLIST:[oss-security] 20170110 CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
804692 102155 CVE-2017-5335 URL:http://www.openwall.com/lists/oss-security/2017/01/10/7  View
804693 102155 CVE-2017-5335 MLIST:[oss-security] 20170110 Re: CVE request: two advisories for GnuTLS GNUTLS-SA-2017-1, GNUTLS-SA-2017-2, fixed in 3.3.26, 3.5.8  View
804694 102155 CVE-2017-5335 URL:http://www.openwall.com/lists/oss-security/2017/01/11/4  View
804695 102155 CVE-2017-5335 MISC:https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=337  View
804696 102155 CVE-2017-5335 CONFIRM:https://gitlab.com/gnutls/gnutls/commit/49be4f7b82eba2363bb8d4090950dad976a77a3a  View
804697 102155 CVE-2017-5335 CONFIRM:https://gnutls.org/security.html#GNUTLS-SA-2017-2  View
804698 102155 CVE-2017-5335 GENTOO:GLSA-201702-04  View
804699 102155 CVE-2017-5335 URL:https://security.gentoo.org/glsa/201702-04  View
804700 102155 CVE-2017-5335 SUSE:openSUSE-SU-2017:0386  View
804701 102155 CVE-2017-5335 URL:http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html  View
804702 102155 CVE-2017-5335 BID:95374  View
804703 102155 CVE-2017-5335 URL:http://www.securityfocus.com/bid/95374  View
804704 102155 CVE-2017-5335 SECTRACK:1037576  View

Related JVN