Wind River Support Network

HomeDefectsLIN5-22946
Fixed

LIN5-22946 : Security Advisory - gnutls - CVE-2017-7869

Created: Apr 26, 2017    Updated: May 29, 2018
Resolved Date: Jul 20, 2017
Found In Version: 5.0.1.39
Fix Version: 5.0.1.41
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencdk/read-packet.c. This issue (which is a subset of the vendor's GNUTLS-SA-2017-3 report) is fixed in 3.5.10.

https://nvd.nist.gov/vuln/detail/CVE-2017-7869

Other Downloads


Live chat
Online