Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
Find out more about CVE-2017-5337 from the MITRE-CVE dictionary and NIST NVD
Login may be required to access defects or downloads.
| Product Name | Status | Defect | Fixed | Downloads |
|---|---|---|---|---|
| Linux | ||||
| Wind River Linux LTS 17 | Not Vulnerable | -- | -- | -- |
| Wind River Linux 9 | Fixed |
LIN9-3708 |
9.0.0.6 |
Wind River Linux 9.0.0.6 |
| Wind River Linux 8 | Fixed |
LIN8-6203 |
8.0.0.17 |
Wind River Linux 8.0.0.17 Wind River Linux 8.0.0.18 Wind River Linux 8.0.0.19 Wind River Linux 8.0.0.20 Wind River Linux 8.0.0.21 Wind River Linux 8.0.0.22 Wind River Linux 8.0.0.23 Wind River Linux 8.0.0.24 Wind River Linux 8.0.0.25 Wind River Linux 8.0.0.26 Wind River Linux 8.0.0.27 Wind River Linux 8.0.0.28 Wind River Linux 8.0.0.29 Wind River Linux 8.0.0.30 Wind River Linux 8.0.0.31 Wind River Linux 8.0.0.32 Wind River Linux 8.0.0.33 |
| Wind River Linux LTS 18 | Not Vulnerable | -- | -- | -- |
| Wind River Linux LTS 19 | Not Vulnerable | -- | -- | -- |
| Wind River Linux CD release | Not Vulnerable | -- | -- | -- |
| VxWorks | ||||
| VxWorks 7 | Not Vulnerable | -- | -- | -- |
| VxWorks 6.9 | Not Vulnerable | -- | -- | -- |
| Product Name | Status | Defect | Fixed | Downloads |
|---|---|---|---|---|
| Linux 7 SCP | Not Vulnerable | -- | -- | -- |
| Linux 7 CGP | Not Vulnerable | -- | -- | -- |
gnutls
