FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

GnuTLS -- Denial of service vulnerability

Affected packages
gnutls < 3.5.13

Details

VuXML ID b33fb1e0-4c37-11e7-afeb-0011d823eebd
Discovery 2017-06-07
Entry 2017-06-08

The GnuTLS project reports:

It was found using the TLS fuzzer tools that decoding a status response TLS extension with valid contents could lead to a crash due to a null pointer dereference. The issue affects GnuTLS server applications.

References

URL https://gnutls.org/security.html#GNUTLS-SA-2017-4