CVE-2017-5334 PUBLISHED

Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.

EPSS 5.59% · 90.2th percentile

Risk Scores

EPSS Score
5.59%
90.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSgnutls280, 3.3.15-5ubuntu2, 3.3.18-1ubuntu1

Timeline

References

Open in Interactive Console →