CVE-2017-7869: Buffer Overflow
GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdkpktread function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gnutlsto a version that resolves this vulnerability.Fixed in 3.5.10 - Upgrade
Upgrade
gnutlsto a version that resolves this vulnerability.Fixed in 3.5.10
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7869?
CVE-2017-7869 is classified as a high severity vulnerability due to its potential for causing heap-based buffer overflow and out-of-bounds write issues.
How do I fix CVE-2017-7869?
To mitigate CVE-2017-7869, upgrade GnuTLS to version 3.5.10 or later.
What software is affected by CVE-2017-7869?
CVE-2017-7869 affects GnuTLS versions prior to 3.5.10.
What types of vulnerabilities does CVE-2017-7869 include?
CVE-2017-7869 includes an integer overflow and a heap-based buffer overflow.
When was CVE-2017-7869 discovered?
CVE-2017-7869 was identified in GnuTLS software versions released before February 20, 2017.