Description (CNA)
GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GnuTLS / gnutls | affected 3.5.12 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/99102
- https://access.redhat.com/errata/RHSA-2017:2292
- https://www.gnutls.org/security.html#GNUTLS-SA-2017-4
- http://www.debian.org/security/2017/dsa-3884
ADP enrichment
No English description supplied.