| Package | Affected versions | Patched versions |
|---|---|---|
| gnutls | = 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.5.6= 3.5.7≤ 3.3.25 |
The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service (out-of-memory error and crash) via a crafted OpenPGP certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free