CVE-2016-7444 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-7444 Interim 1 19 2025-03-25T01:09:25Z current 2021-05-30T13:45:44Z 2025-03-25T01:09:25Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-7444 The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-February/002614.html E-Mail link for SUSE-SU-2017:0348-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NEVLKMTWKZHIHXYGCHNEYH5ECARK6UQS/#NEVLKMTWKZHIHXYGCHNEYH5ECARK6UQS E-Mail link for openSUSE-SU-2017:0386-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 gnutls gnutls-3.2.15-16.1 gnutls-3.3.26-9.el7 gnutls-3.3.27-1.10 gnutls-3.3.27-3.3.1 gnutls-c++-3.3.26-9.el7 gnutls-dane-3.3.26-9.el7 gnutls-devel-3.3.26-9.el7 gnutls-utils-3.3.26-9.el7 libgnutls-devel-3.2.15-16.1 libgnutls-devel-3.3.27-1.10 libgnutls-devel-3.3.27-3.3.1 libgnutls-openssl-devel-3.2.15-16.1 libgnutls-openssl-devel-3.3.27-1.10 libgnutls-openssl-devel-3.3.27-3.3.1 libgnutls-openssl27 libgnutls-openssl27-3.2.15-16.1 libgnutls-openssl27-3.3.27-1.10 libgnutls-openssl27-3.3.27-3.3.1 libgnutls28 libgnutls28-3.2.15-16.1 libgnutls28-3.3.27-1.10 libgnutls28-3.3.27-3.3.1 libgnutls28-32bit libgnutls28-32bit-3.2.15-16.1 libgnutls28-32bit-3.3.27-1.10 libgnutls28-32bit-3.3.27-3.3.1 libgnutlsxx-devel-3.2.15-16.1 libgnutlsxx-devel-3.3.27-1.10 libgnutlsxx-devel-3.3.27-3.3.1 libgnutlsxx28-3.2.15-16.1 libgnutlsxx28-3.3.27-1.10 libgnutlsxx28-3.3.27-3.3.1 gnutls-3.3.26-9.el7 as a component of SUSE Liberty Linux 7 gnutls-c++-3.3.26-9.el7 as a component of SUSE Liberty Linux 7 gnutls-dane-3.3.26-9.el7 as a component of SUSE Liberty Linux 7 gnutls-devel-3.3.26-9.el7 as a component of SUSE Liberty Linux 7 gnutls-utils-3.3.26-9.el7 as a component of SUSE Liberty Linux 7 gnutls-3.2.15-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libgnutls28-3.2.15-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libgnutls28-32bit-3.2.15-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 gnutls-3.2.15-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libgnutls28-3.2.15-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libgnutls28-32bit-3.2.15-16.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 gnutls-3.3.27-1.10 as a component of SUSE Linux Enterprise Desktop 12 SP3 libgnutls28-3.3.27-1.10 as a component of SUSE Linux Enterprise Desktop 12 SP3 libgnutls28-32bit-3.3.27-1.10 as a component of SUSE Linux Enterprise Desktop 12 SP3 gnutls-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libgnutls28-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 libgnutls28-32bit-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 gnutls-3.3.27-3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libgnutls-openssl27-3.3.27-3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libgnutls28-3.3.27-3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libgnutls28-32bit-3.3.27-3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 gnutls-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP1 libgnutls-openssl27-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP1 libgnutls28-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP1 libgnutls28-32bit-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP1 gnutls-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP2 libgnutls-openssl27-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP2 libgnutls28-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP2 libgnutls28-32bit-3.2.15-16.1 as a component of SUSE Linux Enterprise Server 12 SP2 gnutls-3.3.27-1.10 as a component of SUSE Linux Enterprise Server 12 SP3 libgnutls-openssl27-3.3.27-1.10 as a component of SUSE Linux Enterprise Server 12 SP3 libgnutls28-3.3.27-1.10 as a component of SUSE Linux Enterprise Server 12 SP3 libgnutls28-32bit-3.3.27-1.10 as a component of SUSE Linux Enterprise Server 12 SP3 gnutls-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 libgnutls-openssl27-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 libgnutls28-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 libgnutls28-32bit-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 gnutls-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 libgnutls-openssl27-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 libgnutls28-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 libgnutls28-32bit-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server 12 SP5 gnutls-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libgnutls-openssl27-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libgnutls28-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 gnutls-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libgnutls-openssl27-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libgnutls28-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libgnutls28-32bit-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 gnutls-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libgnutls-openssl27-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libgnutls28-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libgnutls28-32bit-3.2.15-16.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 gnutls-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libgnutls-openssl27-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libgnutls28-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libgnutls28-32bit-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libgnutls-devel-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libgnutls-openssl-devel-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libgnutlsxx-devel-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libgnutlsxx28-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libgnutls-devel-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libgnutls-openssl-devel-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libgnutlsxx-devel-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libgnutlsxx28-3.2.15-16.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libgnutls-devel-3.3.27-1.10 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libgnutls-openssl-devel-3.3.27-1.10 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libgnutlsxx-devel-3.3.27-1.10 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libgnutlsxx28-3.3.27-1.10 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libgnutls-devel-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libgnutls-openssl-devel-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libgnutlsxx-devel-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libgnutlsxx28-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libgnutls-devel-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libgnutls-openssl-devel-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libgnutlsxx-devel-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libgnutlsxx28-3.3.27-3.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 gnutls as a component of SUSE Linux Enterprise Server 12 SP2-BCL libgnutls-openssl27 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libgnutls28 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libgnutls28-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to bypass an intended certificate validation mechanism via vectors involving trailing bytes left by gnutls_malloc. CVE-2016-7444 SUSE Liberty Linux 7:gnutls-3.3.26-9.el7 SUSE Liberty Linux 7:gnutls-c++-3.3.26-9.el7 SUSE Liberty Linux 7:gnutls-dane-3.3.26-9.el7 SUSE Liberty Linux 7:gnutls-devel-3.3.26-9.el7 SUSE Liberty Linux 7:gnutls-utils-3.3.26-9.el7 SUSE Linux Enterprise Desktop 12 SP1:gnutls-3.2.15-16.1 SUSE Linux Enterprise Desktop 12 SP1:libgnutls28-3.2.15-16.1 SUSE Linux Enterprise Desktop 12 SP1:libgnutls28-32bit-3.2.15-16.1 SUSE Linux Enterprise Desktop 12 SP2:gnutls-3.2.15-16.1 SUSE Linux Enterprise Desktop 12 SP2:libgnutls28-3.2.15-16.1 SUSE Linux Enterprise Desktop 12 SP2:libgnutls28-32bit-3.2.15-16.1 SUSE Linux Enterprise Desktop 12 SP3:gnutls-3.3.27-1.10 SUSE Linux Enterprise Desktop 12 SP3:libgnutls28-3.3.27-1.10 SUSE Linux Enterprise Desktop 12 SP3:libgnutls28-32bit-3.3.27-1.10 SUSE Linux Enterprise Desktop 12 SP4:gnutls-3.3.27-3.3.1 SUSE Linux Enterprise Desktop 12 SP4:libgnutls28-3.3.27-3.3.1 SUSE Linux Enterprise Desktop 12 SP4:libgnutls28-32bit-3.3.27-3.3.1 SUSE Linux Enterprise High Performance Computing 12 SP5:gnutls-3.3.27-3.3.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libgnutls-openssl27-3.3.27-3.3.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libgnutls28-3.3.27-3.3.1 SUSE Linux Enterprise High Performance Computing 12 SP5:libgnutls28-32bit-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP1:gnutls-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP1:libgnutls-openssl27-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP1:libgnutls28-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP1:libgnutls28-32bit-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP2:gnutls-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP2:libgnutls-openssl27-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP2:libgnutls28-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP2:libgnutls28-32bit-3.2.15-16.1 SUSE Linux Enterprise Server 12 SP3:gnutls-3.3.27-1.10 SUSE Linux Enterprise Server 12 SP3:libgnutls-openssl27-3.3.27-1.10 SUSE Linux Enterprise Server 12 SP3:libgnutls28-3.3.27-1.10 SUSE Linux Enterprise Server 12 SP3:libgnutls28-32bit-3.3.27-1.10 SUSE Linux Enterprise Server 12 SP4:gnutls-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP4:libgnutls-openssl27-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP4:libgnutls28-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP4:libgnutls28-32bit-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP5:gnutls-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP5:libgnutls-openssl27-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP5:libgnutls28-3.3.27-3.3.1 SUSE Linux Enterprise Server 12 SP5:libgnutls28-32bit-3.3.27-3.3.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:gnutls-3.2.15-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libgnutls-openssl27-3.2.15-16.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libgnutls28-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:gnutls-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libgnutls-openssl27-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libgnutls28-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libgnutls28-32bit-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:gnutls-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libgnutls-openssl27-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libgnutls28-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libgnutls28-32bit-3.2.15-16.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gnutls-3.3.27-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libgnutls-openssl27-3.3.27-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libgnutls28-3.3.27-3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libgnutls28-32bit-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutls-devel-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutls-openssl-devel-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutlsxx-devel-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libgnutlsxx28-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libgnutls-devel-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libgnutls-openssl-devel-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libgnutlsxx-devel-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP2:libgnutlsxx28-3.2.15-16.1 SUSE Linux Enterprise Software Development Kit 12 SP3:libgnutls-devel-3.3.27-1.10 SUSE Linux Enterprise Software Development Kit 12 SP3:libgnutls-openssl-devel-3.3.27-1.10 SUSE Linux Enterprise Software Development Kit 12 SP3:libgnutlsxx-devel-3.3.27-1.10 SUSE Linux Enterprise Software Development Kit 12 SP3:libgnutlsxx28-3.3.27-1.10 SUSE Linux Enterprise Software Development Kit 12 SP4:libgnutls-devel-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libgnutls-openssl-devel-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libgnutlsxx-devel-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:libgnutlsxx28-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgnutls-devel-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgnutls-openssl-devel-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgnutlsxx-devel-3.3.27-3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libgnutlsxx28-3.3.27-3.3.1 low 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N