GnuTLS Server Application Crash Vulnerability

CVE-2017-7507 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.

Learn more about our Cis Benchmark Audit For Server Software.