CVE Catalog
CVE-2017-5337
CriticalSummary
Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.
Risk Assessment
Attackers may exploit this vulnerability to execute remote code or destabilize the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update GnuTLS to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity.
Original NVD description (English source)
Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted OpenPGP certificate.