{"id":"CVE-2016-7444","aliases":["ALPINE-CVE-2016-7444","DEBIAN-CVE-2016-7444","EUVD-2016-8297","GHSA-3ccg-r3xv-q4cg","MGASA-2016-0326","RHSA-2017:2292","SUSE-SU-2017:0348-1","UBUNTU-CVE-2016-7444","USN-3183-1"],"status":"published","title":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x...","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02437,"percentile":0.84389,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-264"],"published":"2016-09-27T00:00:00Z","modified":"2026-10-24T14:12:25Z","fixes":[{"ecosystem":"Alpine:v3.2","package":"gnutls","fixed_in":["3.4.5-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gnutls28","fixed_in":["3.5.3-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gnutls28","fixed_in":["3.5.3-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gnutls28","fixed_in":["3.5.3-4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"gnutls","fixed_in":["3.2.21-1.2.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"gnutls28","fixed_in":["3.4.10-4ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.5-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.3-4"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.21-1.2.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-dane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gnutls-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.26-9.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-16.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.2"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gnutls26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.23-12ubuntu2.6"}]}],"versions":["2.12.23-1ubuntu4","2.12.23-1ubuntu5","2.12.23-12ubuntu1","2.12.23-12ubuntu2","2.12.23-12ubuntu2.1","2.12.23-12ubuntu2.2","2.12.23-12ubuntu2.3","2.12.23-12ubuntu2.4","2.12.23-12ubuntu2.5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gnutls28","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-4ubuntu1.2"}]}],"versions":["3.3.15-5ubuntu2","3.3.18-1ubuntu1","3.3.20-1ubuntu1","3.4.9-2ubuntu1","3.4.10-4ubuntu1","3.4.10-4ubuntu1.1"],"bundled":6}],"products":[{"vendor":"gnu","product":"gnutls"}],"references":[{"url":"http://www.securityfocus.com/bid/92893","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://gitlab.com/gnutls/gnutls/commit/964632f37dfdfb914ebc5e49db4fa29af35b1de9","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2292","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://lists.gnupg.org/pipermail/gnutls-devel/2016-September/008146.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://www.gnutls.org/security.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7444","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3ccg-r3xv-q4cg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-7444","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-7444","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0326.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19358","tags":["report"]},{"url":"http://gnutls.org/security.html#GNUTLS-SA-2016-3","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/R3BHGPTCK63HOFYABBXNV567ESVRRKQD/","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/09/18/7","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1374266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1378373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1380642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1383748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1411836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1412236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454621","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2292.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7444","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7444","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5334","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5334","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5334","tags":["advisory"]},{"url":"https://gnutls.org/security.html#GNUTLS-SA-2017-1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5335","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5335","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5336","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5336","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5337","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5337","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7507","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7507","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7507","tags":["advisory"]},{"url":"https://www.gnutls.org/security.html#GNUTLS-SA-2017-4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7869","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7869","tags":["advisory"]},{"url":"https://www.gnutls.org/security.html#GNUTLS-SA-2017-3","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170348-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1005879","tags":["report"]},{"url":"https://bugzilla.suse.com/1018832","tags":["report"]},{"url":"https://bugzilla.suse.com/999646","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5337","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-7444","tags":["report"]},{"url":"https://gnutls.org/security.html#GNUTLS-SA-2016-3","tags":["report"]},{"url":"http://lists.gnutls.org/pipermail/gnutls-devel/2016-September/008146.html","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/09/18/3","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3183-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-8610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5336","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5337","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-7444","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2016-09-27T15:00:00Z","modified":"2024-08-06T01:57:47.621Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-8297","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2016-09-27T15:00:00Z","modified":"2024-08-06T01:57:47Z","updated_at":"2026-11-03T02:22:32.939633Z"}],"ghsa":[{"id":"GHSA-3ccg-r3xv-q4cg","title":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x...","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2022-05-14T03:55:50Z","modified":"2023-02-03T05:00:51Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:52:51.988629Z"}],"nvd":[{"id":"CVE-2016-7444","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2016-09-27T15:59:12.517Z","modified":"2026-06-17T00:53:04.8Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:31.485755Z"}],"osv":[{"id":"ALPINE-CVE-2016-7444","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2016-09-27T15:59:12.517Z","modified":"2026-09-22T06:30:28.444715266Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"CVE-2016-7444","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2016-09-27T15:59:12.517Z","modified":"2026-10-24T14:12:25.104705824Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:03.171316Z"},{"id":"DEBIAN-CVE-2016-7444","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2016-09-27T15:59:12.517Z","modified":"2026-09-22T07:00:34.586326466Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:27.910042Z"},{"id":"RHSA-2017:2292","title":"Red Hat Security Advisory: gnutls security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:57:46Z","modified":"2026-06-26T12:22:01.07526971Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-7444","description":"The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.","status":"published","published":"2016-09-27T00:00:00Z","modified":"2026-04-22T10:57:20.777508Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"MGASA-2016-0326","title":"Updated gnutls packages fix security vulnerability","description":"An issue was found in certificate validation using OCSP responses caused\nby not verifying the serial length, which can falsely report a certificate\nas valid (CVE-2016-7444).\n","status":"published","published":"2016-09-28T05:59:24Z","modified":"2026-04-16T06:26:28.222070674Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2017:0348-1","title":"Security update for gnutls","description":"\nThis update for gnutls fixes the following security issues:\n\n- GnuTLS could have crashed when processing maliciously crafted OpenPGP\n  certificates (GNUTLS-SA-2017-2, bsc#1018832, CVE-2017-5335, CVE-2017-5337,\n  CVE-2017-5336)\n- GnuTLS could have falsely accepted certificates when using OCSP\n  (GNUTLS-SA-2016-3, bsc#999646, CVE-2016-7444)\n- GnuTLS could have suffered from 100% CPU load DoS attacks by using SSL alert\n  packets during the handshake (bsc#1005879, CVE-2016-8610)\n","status":"published","published":"2017-02-01T07:19:39Z","modified":"2026-02-04T04:02:51.62087Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3183-1","title":"gnutls26, gnutls28 vulnerabilities","description":"Stefan Buehler discovered that GnuTLS incorrectly verified the serial\nlength of OCSP responses. A remote attacker could possibly use this issue\nto bypass certain certificate validation measures. This issue only applied\nto Ubuntu 16.04 LTS. (CVE-2016-7444)\n\nShi Lei discovered that GnuTLS incorrectly handled certain warning alerts.\nA remote attacker could possibly use this issue to cause GnuTLS to hang,\nresulting in a denial of service. This issue has only been addressed in\nUbuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-8610)\n\nIt was discovered that GnuTLS incorrectly decoded X.509 certificates with a\nProxy Certificate Information extension. A remote attacker could use this\nissue to cause GnuTLS to crash, resulting in a denial of service, or\npossibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS\nand Ubuntu 16.10. (CVE-2017-5334)\n\nIt was discovered that GnuTLS incorrectly handled certain OpenPGP\ncertificates. A remote attacker could possibly use this issue to cause\nGnuTLS to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2017-5335, CVE-2017-5336, CVE-2017-5337)\n","status":"published","published":"2017-02-01T17:56:17Z","modified":"2026-04-22T09:32:10.960296Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}