Search for packages
Package details: pkg:alpm/archlinux/gnutls@3.4.14-1
purl pkg:alpm/archlinux/gnutls@3.4.14-1
Next non-vulnerable version 3.4.15-1
Latest non-vulnerable version 3.7.1-1
Risk 3.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-6jvx-nbvu-aaaq
Aliases:
CVE-2016-7444
The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.
3.4.15-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:47:01.402771+00:00 Arch Linux Importer Affected by VCID-6jvx-nbvu-aaaq https://security.archlinux.org/AVG-26 36.0.0
2024-09-18T02:02:23.738150+00:00 Arch Linux Importer Affected by VCID-6jvx-nbvu-aaaq https://security.archlinux.org/AVG-26 34.0.1
2024-01-16T16:00:35.385491+00:00 Arch Linux Importer Affected by VCID-6jvx-nbvu-aaaq https://security.archlinux.org/AVG-26 34.0.0rc2
2024-01-03T22:28:25.110686+00:00 Arch Linux Importer Affected by VCID-6jvx-nbvu-aaaq https://security.archlinux.org/AVG-26 34.0.0rc1