CVE-2017-5334

Critical

Published: 24/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.

Risk Assessment

An attacker may exploit this vulnerability to conduct attacks that could lead to unauthorized access or system destabilization.

Recommendation

It is recommended to update GnuTLS to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity.

Original NVD description (English source)

Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.