Null pointer dereference in Gnu - CVE-2017-7507

Vulnerability identifier: #VU7481

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-7507

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to NULL pointer dereference while decoding a status response TLS extension with valid contents. A remote attacker can send specially crafted status_request extension in a ClientHello message to cause the GnuTLS server application to crash.

Successful exploitation of the vulnerability results in denial of service.

Gnu
Arch Linux
Gentoo Linux
Debian Linux
Fedora
Red Hat Enterprise Linux Server
Ubuntu
gnutls (Alpine package)
gnutls
mingw-gnutls
gnutls30

Update to version 3.5.13 or later.

gnutls (Alpine package) - addressed in versions 3.4.17-r0, 3.4.17-r1
gnutls - addressed in versions 3.5.13-1.fc25, 3.5.13-1.fc26
mingw-gnutls - update to 3.5.13-1.fc26
gnutls30 - addressed in versions 3.5.18-1.el6, 3.5.19-1.el6

• https://www.gnutls.org/security.html#GNUTLS-SA-2017-4

• Denial of service in GnuTLS
• Arch Linux update for GnuTLS
• Red Hat update for GnuTLS
• Gentoo update for GnuTLS
• Arch Linux update for gnutls
• Ubuntu update for GnuTLS
• Debian update for gnutls28
• Null pointer dereference in gnutls (Alpine package)
• Fedora 26 update for gnutls
• Fedora 25 update for gnutls
• Fedora 26 update for mingw-gnutls
• Fedora EPEL 6 update for gnutls30
• Fedora EPEL 6 update for gnutls30