Security restrictions bypass in Gnu - CVE-2016-7444

Vulnerability identifier: #VU7655

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-7444

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote unauthenticated attacker to bypass security restrictions on the target system.

The weakness exists due to insufficient validation of the serial length of an OCSP response by the gnutls_ocsp_resp_check_crt function in the lib/x509/ocsp.c code. A remote attacker can bypass certificate validation and conduct further attacks.

Gnu
Arch Linux
Fedora
Red Hat Enterprise Linux Server
SUSE Linux
Ubuntu
Opensuse
gnutls (Alpine package)
mingw-gnutls
gnutls

Update to version 3.4.15 or 3.5.4.

gnutls (Alpine package) - update to 3.3.18-r1
mingw-gnutls - addressed in versions 3.3.24-1.el7, 3.5.4-1.fc25
gnutls - addressed in versions 3.4.15-1.fc23, 3.4.15-1.fc24, 3.5.4-1.fc25

• https://www.gnutls.org/security.html

• Security restrictions bypass in GnuTLS
• Red Hat update for GnuTLS
• Ubuntu update for GnuTLS
• Ubuntu update for GnuTLS
• Arch Linux update for lib32-gnutls
• Arch Linux update for gnutls
• Arch Linux update for lib32-gnutls
• Arch Linux update for gnutls
• OpenSUSE Linux update for gnutls
• SUSE Linux update for gnutls
• Security restrictions bypass in gnutls (Alpine package)
• Fedora 25 update for gnutls
• Fedora 24 update for gnutls
• Fedora 23 update for gnutls
• Fedora 25 update for mingw-gnutls
• Fedora EPEL 7 update for mingw-gnutls