CVE-2016-7444: High severity gnutls vulnerability
It was found an issue in certificate validation using OCSP responses caused by not verifying the serial length, which can falsely report a certificate as valid.
Upstream patch:
https://gitlab.com/gnutls/gnutls/commit/964632f37dfdfb914ebc5e49db4fa29af35b1de9
External References:
https://www.gnutls.org/security.html https://lists.gnupg.org/pipermail/gnutls-devel/2016-September/008146.html
Other sources
The gnutlsocsprespcheckcrt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutlsmalloc.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7444?
CVE-2016-7444 is considered a critical vulnerability due to the potential for certificate validation bypass.
How do I fix CVE-2016-7444?
To mitigate CVE-2016-7444, upgrade GnuTLS to version 3.4.15 or later, or 3.5.4 or later.
What software is affected by CVE-2016-7444?
CVE-2016-7444 affects multiple versions of GnuTLS including versions prior to 3.4.15 and certain versions of 3.5.x.
What are the consequences of CVE-2016-7444?
Exploiting CVE-2016-7444 may allow attackers to cause applications to incorrectly validate revoked certificates.
Is there a patch available for CVE-2016-7444?
Yes, a patch for CVE-2016-7444 has been released and is available in the software updates for affected GnuTLS versions.