Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-4f3z-x697-abd5
Summarygnutls: Out-of-bounds write related to the cdk_pkt_read function (GNUTLS-SA-2017-3)
Aliases
0
alias CVE-2017-7869
Fixed_packages
0
url pkg:deb/debian/gnutls28@3.5.8-4?distro=trixie
purl pkg:deb/debian/gnutls28@3.5.8-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.5.8-4%3Fdistro=trixie
1
url pkg:deb/debian/gnutls28@3.5.8-5%2Bdeb9u5
purl pkg:deb/debian/gnutls28@3.5.8-5%2Bdeb9u5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3qcs-1fcj-m3fw
1
vulnerability VCID-6fzu-8998-abdk
2
vulnerability VCID-86j1-j381-cucy
3
vulnerability VCID-92x9-x1ep-cqdn
4
vulnerability VCID-9pdw-udwq-6kbz
5
vulnerability VCID-a18u-4j99-nbf8
6
vulnerability VCID-a296-a2f2-kfba
7
vulnerability VCID-abn3-2b4q-z7ga
8
vulnerability VCID-f5c7-jcd9-67hj
9
vulnerability VCID-gy9e-81rw-pug2
10
vulnerability VCID-jxjc-vjdc-1yfj
11
vulnerability VCID-k31b-6m7s-pffq
12
vulnerability VCID-k5vv-ts4z-j7g5
13
vulnerability VCID-pf5n-65mk-2ff3
14
vulnerability VCID-q3g5-4xaf-hudf
15
vulnerability VCID-qp8x-339r-pbhe
16
vulnerability VCID-qtsh-kn2d-h7cr
17
vulnerability VCID-r531-qbtt-akgf
18
vulnerability VCID-sp9u-9wwg-b7e9
19
vulnerability VCID-uc8j-r79v-n7ck
20
vulnerability VCID-uws5-j79f-cbar
21
vulnerability VCID-vz27-wyaf-tkcr
22
vulnerability VCID-w7f6-5b6h-8kh4
23
vulnerability VCID-wqyp-93bk-vbh2
24
vulnerability VCID-x5jd-qddc-eudq
25
vulnerability VCID-zjx8-ydmt-juf3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.5.8-5%252Bdeb9u5
2
url pkg:deb/debian/gnutls28@3.7.1-5%2Bdeb11u5?distro=trixie
purl pkg:deb/debian/gnutls28@3.7.1-5%2Bdeb11u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.7.1-5%252Bdeb11u5%3Fdistro=trixie
3
url pkg:deb/debian/gnutls28@3.7.9-2%2Bdeb12u5?distro=trixie
purl pkg:deb/debian/gnutls28@3.7.9-2%2Bdeb12u5?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.7.9-2%252Bdeb12u5%3Fdistro=trixie
4
url pkg:deb/debian/gnutls28@3.8.9-3%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/gnutls28@3.8.9-3%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.8.9-3%252Bdeb13u2%3Fdistro=trixie
5
url pkg:deb/debian/gnutls28@3.8.12-3?distro=trixie
purl pkg:deb/debian/gnutls28@3.8.12-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.8.12-3%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/gnutls28@3.2.15-1~bpo70%2B1
purl pkg:deb/debian/gnutls28@3.2.15-1~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-334s-gdq8-jucy
1
vulnerability VCID-3qcs-1fcj-m3fw
2
vulnerability VCID-4f3z-x697-abd5
3
vulnerability VCID-5aea-cjz1-jkh1
4
vulnerability VCID-6fzu-8998-abdk
5
vulnerability VCID-6u4f-wt5u-8ueb
6
vulnerability VCID-86j1-j381-cucy
7
vulnerability VCID-92x9-x1ep-cqdn
8
vulnerability VCID-9pdw-udwq-6kbz
9
vulnerability VCID-a18u-4j99-nbf8
10
vulnerability VCID-a296-a2f2-kfba
11
vulnerability VCID-abn3-2b4q-z7ga
12
vulnerability VCID-egeh-jk4m-sba8
13
vulnerability VCID-f5c7-jcd9-67hj
14
vulnerability VCID-fybd-zwbt-23ad
15
vulnerability VCID-gy9e-81rw-pug2
16
vulnerability VCID-hycu-7x87-jkcf
17
vulnerability VCID-jxjc-vjdc-1yfj
18
vulnerability VCID-k31b-6m7s-pffq
19
vulnerability VCID-k5vv-ts4z-j7g5
20
vulnerability VCID-m31f-a3pn-yyb4
21
vulnerability VCID-mtvm-zj2z-m7gf
22
vulnerability VCID-nce1-q8wc-s3ae
23
vulnerability VCID-p6yt-pz69-xkd8
24
vulnerability VCID-pf5n-65mk-2ff3
25
vulnerability VCID-q3g5-4xaf-hudf
26
vulnerability VCID-qp8x-339r-pbhe
27
vulnerability VCID-qtsh-kn2d-h7cr
28
vulnerability VCID-qup9-qy11-fqhe
29
vulnerability VCID-r531-qbtt-akgf
30
vulnerability VCID-sp9u-9wwg-b7e9
31
vulnerability VCID-uc8j-r79v-n7ck
32
vulnerability VCID-uws5-j79f-cbar
33
vulnerability VCID-vz27-wyaf-tkcr
34
vulnerability VCID-w7f6-5b6h-8kh4
35
vulnerability VCID-wqyp-93bk-vbh2
36
vulnerability VCID-x5jd-qddc-eudq
37
vulnerability VCID-xap5-djda-2uem
38
vulnerability VCID-y71t-sfb1-w3gw
39
vulnerability VCID-zjx8-ydmt-juf3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.2.15-1~bpo70%252B1
1
url pkg:deb/debian/gnutls28@3.2.15-2~bpo70%2B1
purl pkg:deb/debian/gnutls28@3.2.15-2~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-334s-gdq8-jucy
1
vulnerability VCID-3qcs-1fcj-m3fw
2
vulnerability VCID-4f3z-x697-abd5
3
vulnerability VCID-5aea-cjz1-jkh1
4
vulnerability VCID-6fzu-8998-abdk
5
vulnerability VCID-6u4f-wt5u-8ueb
6
vulnerability VCID-86j1-j381-cucy
7
vulnerability VCID-92x9-x1ep-cqdn
8
vulnerability VCID-9pdw-udwq-6kbz
9
vulnerability VCID-a18u-4j99-nbf8
10
vulnerability VCID-a296-a2f2-kfba
11
vulnerability VCID-abn3-2b4q-z7ga
12
vulnerability VCID-egeh-jk4m-sba8
13
vulnerability VCID-f5c7-jcd9-67hj
14
vulnerability VCID-fybd-zwbt-23ad
15
vulnerability VCID-gy9e-81rw-pug2
16
vulnerability VCID-hycu-7x87-jkcf
17
vulnerability VCID-jxjc-vjdc-1yfj
18
vulnerability VCID-k31b-6m7s-pffq
19
vulnerability VCID-k5vv-ts4z-j7g5
20
vulnerability VCID-m31f-a3pn-yyb4
21
vulnerability VCID-mtvm-zj2z-m7gf
22
vulnerability VCID-nce1-q8wc-s3ae
23
vulnerability VCID-pf5n-65mk-2ff3
24
vulnerability VCID-q3g5-4xaf-hudf
25
vulnerability VCID-qp8x-339r-pbhe
26
vulnerability VCID-qtsh-kn2d-h7cr
27
vulnerability VCID-qup9-qy11-fqhe
28
vulnerability VCID-r531-qbtt-akgf
29
vulnerability VCID-sp9u-9wwg-b7e9
30
vulnerability VCID-uc8j-r79v-n7ck
31
vulnerability VCID-uws5-j79f-cbar
32
vulnerability VCID-vz27-wyaf-tkcr
33
vulnerability VCID-w7f6-5b6h-8kh4
34
vulnerability VCID-wqyp-93bk-vbh2
35
vulnerability VCID-x5jd-qddc-eudq
36
vulnerability VCID-xap5-djda-2uem
37
vulnerability VCID-y71t-sfb1-w3gw
38
vulnerability VCID-zjx8-ydmt-juf3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.2.15-2~bpo70%252B1
2
url pkg:deb/debian/gnutls28@3.3.8-6~bpo70%2B1
purl pkg:deb/debian/gnutls28@3.3.8-6~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-334s-gdq8-jucy
1
vulnerability VCID-3qcs-1fcj-m3fw
2
vulnerability VCID-4f3z-x697-abd5
3
vulnerability VCID-5aea-cjz1-jkh1
4
vulnerability VCID-6fzu-8998-abdk
5
vulnerability VCID-6u4f-wt5u-8ueb
6
vulnerability VCID-86j1-j381-cucy
7
vulnerability VCID-92x9-x1ep-cqdn
8
vulnerability VCID-9pdw-udwq-6kbz
9
vulnerability VCID-a18u-4j99-nbf8
10
vulnerability VCID-a296-a2f2-kfba
11
vulnerability VCID-abn3-2b4q-z7ga
12
vulnerability VCID-egeh-jk4m-sba8
13
vulnerability VCID-f5c7-jcd9-67hj
14
vulnerability VCID-fybd-zwbt-23ad
15
vulnerability VCID-gy9e-81rw-pug2
16
vulnerability VCID-jxjc-vjdc-1yfj
17
vulnerability VCID-k31b-6m7s-pffq
18
vulnerability VCID-k5vv-ts4z-j7g5
19
vulnerability VCID-m31f-a3pn-yyb4
20
vulnerability VCID-mtvm-zj2z-m7gf
21
vulnerability VCID-nce1-q8wc-s3ae
22
vulnerability VCID-pf5n-65mk-2ff3
23
vulnerability VCID-q3g5-4xaf-hudf
24
vulnerability VCID-qp8x-339r-pbhe
25
vulnerability VCID-qtsh-kn2d-h7cr
26
vulnerability VCID-qup9-qy11-fqhe
27
vulnerability VCID-r531-qbtt-akgf
28
vulnerability VCID-sp9u-9wwg-b7e9
29
vulnerability VCID-uc8j-r79v-n7ck
30
vulnerability VCID-uws5-j79f-cbar
31
vulnerability VCID-vz27-wyaf-tkcr
32
vulnerability VCID-w7f6-5b6h-8kh4
33
vulnerability VCID-wqyp-93bk-vbh2
34
vulnerability VCID-x5jd-qddc-eudq
35
vulnerability VCID-y71t-sfb1-w3gw
36
vulnerability VCID-zjx8-ydmt-juf3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.3.8-6~bpo70%252B1
3
url pkg:deb/debian/gnutls28@3.3.8-6
purl pkg:deb/debian/gnutls28@3.3.8-6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-334s-gdq8-jucy
1
vulnerability VCID-3qcs-1fcj-m3fw
2
vulnerability VCID-4f3z-x697-abd5
3
vulnerability VCID-5aea-cjz1-jkh1
4
vulnerability VCID-6fzu-8998-abdk
5
vulnerability VCID-6u4f-wt5u-8ueb
6
vulnerability VCID-86j1-j381-cucy
7
vulnerability VCID-92x9-x1ep-cqdn
8
vulnerability VCID-9pdw-udwq-6kbz
9
vulnerability VCID-a18u-4j99-nbf8
10
vulnerability VCID-a296-a2f2-kfba
11
vulnerability VCID-abn3-2b4q-z7ga
12
vulnerability VCID-egeh-jk4m-sba8
13
vulnerability VCID-f5c7-jcd9-67hj
14
vulnerability VCID-gy9e-81rw-pug2
15
vulnerability VCID-jxjc-vjdc-1yfj
16
vulnerability VCID-k31b-6m7s-pffq
17
vulnerability VCID-k5vv-ts4z-j7g5
18
vulnerability VCID-m31f-a3pn-yyb4
19
vulnerability VCID-mtvm-zj2z-m7gf
20
vulnerability VCID-nce1-q8wc-s3ae
21
vulnerability VCID-pf5n-65mk-2ff3
22
vulnerability VCID-q3g5-4xaf-hudf
23
vulnerability VCID-qp8x-339r-pbhe
24
vulnerability VCID-qtsh-kn2d-h7cr
25
vulnerability VCID-qup9-qy11-fqhe
26
vulnerability VCID-r531-qbtt-akgf
27
vulnerability VCID-sp9u-9wwg-b7e9
28
vulnerability VCID-uc8j-r79v-n7ck
29
vulnerability VCID-uws5-j79f-cbar
30
vulnerability VCID-vz27-wyaf-tkcr
31
vulnerability VCID-w7f6-5b6h-8kh4
32
vulnerability VCID-wqyp-93bk-vbh2
33
vulnerability VCID-x5jd-qddc-eudq
34
vulnerability VCID-y71t-sfb1-w3gw
35
vulnerability VCID-zjx8-ydmt-juf3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.3.8-6
4
url pkg:deb/debian/gnutls28@3.3.8-6%2Bdeb8u7
purl pkg:deb/debian/gnutls28@3.3.8-6%2Bdeb8u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-334s-gdq8-jucy
1
vulnerability VCID-3qcs-1fcj-m3fw
2
vulnerability VCID-4f3z-x697-abd5
3
vulnerability VCID-5aea-cjz1-jkh1
4
vulnerability VCID-6fzu-8998-abdk
5
vulnerability VCID-6u4f-wt5u-8ueb
6
vulnerability VCID-86j1-j381-cucy
7
vulnerability VCID-92x9-x1ep-cqdn
8
vulnerability VCID-9pdw-udwq-6kbz
9
vulnerability VCID-a18u-4j99-nbf8
10
vulnerability VCID-a296-a2f2-kfba
11
vulnerability VCID-abn3-2b4q-z7ga
12
vulnerability VCID-egeh-jk4m-sba8
13
vulnerability VCID-f5c7-jcd9-67hj
14
vulnerability VCID-gy9e-81rw-pug2
15
vulnerability VCID-jxjc-vjdc-1yfj
16
vulnerability VCID-k31b-6m7s-pffq
17
vulnerability VCID-k5vv-ts4z-j7g5
18
vulnerability VCID-m31f-a3pn-yyb4
19
vulnerability VCID-mtvm-zj2z-m7gf
20
vulnerability VCID-nce1-q8wc-s3ae
21
vulnerability VCID-pf5n-65mk-2ff3
22
vulnerability VCID-q3g5-4xaf-hudf
23
vulnerability VCID-qp8x-339r-pbhe
24
vulnerability VCID-qtsh-kn2d-h7cr
25
vulnerability VCID-qup9-qy11-fqhe
26
vulnerability VCID-r531-qbtt-akgf
27
vulnerability VCID-sp9u-9wwg-b7e9
28
vulnerability VCID-uc8j-r79v-n7ck
29
vulnerability VCID-uws5-j79f-cbar
30
vulnerability VCID-vz27-wyaf-tkcr
31
vulnerability VCID-w7f6-5b6h-8kh4
32
vulnerability VCID-wqyp-93bk-vbh2
33
vulnerability VCID-x5jd-qddc-eudq
34
vulnerability VCID-y71t-sfb1-w3gw
35
vulnerability VCID-zjx8-ydmt-juf3
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gnutls28@3.3.8-6%252Bdeb8u7
5
url pkg:rpm/redhat/gnutls@3.3.26-9?arch=el7
purl pkg:rpm/redhat/gnutls@3.3.26-9?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4f3z-x697-abd5
1
vulnerability VCID-6u4f-wt5u-8ueb
2
vulnerability VCID-egeh-jk4m-sba8
3
vulnerability VCID-k31b-6m7s-pffq
4
vulnerability VCID-m31f-a3pn-yyb4
5
vulnerability VCID-mtvm-zj2z-m7gf
6
vulnerability VCID-y71t-sfb1-w3gw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gnutls@3.3.26-9%3Farch=el7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7869.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7869.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7869
reference_id
reference_type
scores
0
value 0.00703
scoring_system epss
scoring_elements 0.72024
published_at 2026-04-01T12:55:00Z
1
value 0.00703
scoring_system epss
scoring_elements 0.72108
published_at 2026-04-16T12:55:00Z
2
value 0.00703
scoring_system epss
scoring_elements 0.72076
published_at 2026-04-09T12:55:00Z
3
value 0.00703
scoring_system epss
scoring_elements 0.72099
published_at 2026-04-11T12:55:00Z
4
value 0.00703
scoring_system epss
scoring_elements 0.72082
published_at 2026-04-12T12:55:00Z
5
value 0.00703
scoring_system epss
scoring_elements 0.72066
published_at 2026-04-13T12:55:00Z
6
value 0.00703
scoring_system epss
scoring_elements 0.72031
published_at 2026-04-02T12:55:00Z
7
value 0.00703
scoring_system epss
scoring_elements 0.72051
published_at 2026-04-04T12:55:00Z
8
value 0.00703
scoring_system epss
scoring_elements 0.72027
published_at 2026-04-07T12:55:00Z
9
value 0.00703
scoring_system epss
scoring_elements 0.72064
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7869
2
reference_url https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420
reference_id
reference_type
scores
url https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7869
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7869
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://gitlab.com/gnutls/gnutls/commit/51464af713d71802e3c6d5ac15f1a95132a354fe
reference_id
reference_type
scores
url https://gitlab.com/gnutls/gnutls/commit/51464af713d71802e3c6d5ac15f1a95132a354fe
6
reference_url https://www.gnutls.org/security.html
reference_id
reference_type
scores
url https://www.gnutls.org/security.html
7
reference_url http://www.securityfocus.com/bid/97040
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/97040
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1443033
reference_id 1443033
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1443033
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7869
reference_id CVE-2017-7869
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2017-7869
11
reference_url https://access.redhat.com/errata/RHSA-2017:2292
reference_id RHSA-2017:2292
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2292
12
reference_url https://usn.ubuntu.com/3318-1/
reference_id USN-3318-1
reference_type
scores
url https://usn.ubuntu.com/3318-1/
Weaknesses
0
cwe_id 787
name Out-of-bounds Write
description The product writes data past the end, or before the beginning, of the intended buffer.
Exploits
Severity_range_score5.0 - 9.8
Exploitability0.5
Weighted_severity7.3
Risk_score3.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-4f3z-x697-abd5