CVE-2017-5336

Critical

Published: 24/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.

Risk Assessment

Attackers may exploit this vulnerability to execute arbitrary code remotely or destabilize the system, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to update GnuTLS to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity.

Original NVD description (English source)

Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via a crafted OpenPGP certificate.