CVE-2016-7444

—

CVSS 3.0

7.5 high

EPSS

2%p83

Published

Sep 27, 2016 (Sep 27, 2016)

Modified

Jun 17, 2026

Description

The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc.

Vendors: gnu
Products: gnutls
Weakness: CWE-264
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.