[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

 
Paid content will be excluded from the download.


Download | Alert*
OVAL

[3.4] gnutls: Incorrect certificate validation when using OCSP responses (CVE-2016-7444)

ID: oval:org.secpod.oval:def:1800445Date: (C)2018-03-30   (M)2024-01-29
Class: PATCHFamily: unix




It was found an issue in certificate validation using OCSP responses caused by not verifying the serial length, which can falsely report a certificate as valid..

Platform:
Alpine Linux 3.4
Product:
gnutls
Reference:
6230
CVE-2016-7444
CVE    1
CVE-2016-7444
CPE    7
cpe:/a:gnu:gnutls:3.4.14
cpe:/o:alpinelinux:alpine_linux:3.4
cpe:/a:gnu:gnutls:3.5.3
cpe:/a:gnu:gnutls:3.5.0
...

© SecPod Technologies