VULNERABILITY INTELLIGENCE

CVE-2017-5334

CVSS score9.8 CRITICAL

EPSS probability32.75%

CISA KEVNot currently listed

Published2017-03-24

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via crafted policy language information in an X.509 certificate with a Proxy Certificate Information extension.

Weakness classification

CWE-415: Double Free

Primary references

security@debian.org — Third Party Advisory
security@debian.org — Mailing List, Patch, Third Party Advisory
security@debian.org — Mailing List, Patch, Third Party Advisory
security@debian.org — Third Party Advisory, VDB Entry
security@debian.org — Third Party Advisory, VDB Entry
security@debian.org
security@debian.org — Issue Tracking, Patch, Third Party Advisory
security@debian.org — Vendor Advisory
security@debian.org — Patch, Third Party Advisory, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory