UBUNTU-CVE-2017-5336

🗓️ 11 Jan 2017 00:00:00Reported by GoogleType

Stack-based buffer overflow in cdk_pk_get_keyid in GnuTLS up to versions 3.3.25 and 3.5.x up to 3.5.7 allows remote execution via crafted OpenPGP certificate.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Multiple vulnerabilities in gnutls (CVE-2017-5337 CVE-2017-5336)	19 Jun 202516:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GnuTLS affect Power Hardware Management Console	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager Appliance is affected by GnuTLS vulnerabilities	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in openssl, gnutl, mysql, kernel, glibc, ntp shipped with SmartCloud Entry Appliance	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GnuTLS affect PowerKVM	18 Jun 201801:38	–	ibm
Amazon	Medium: gnutls	6 Apr 201700:00	–	amazon
Tenable Nessus	Amazon Linux AMI : gnutls (ALAS-2017-815)	18 Apr 201700:00	–	nessus
Tenable Nessus	CentOS 6 : gnutls (CESA-2017:0574)	27 Mar 201700:00	–	nessus
Tenable Nessus	CentOS 7 : gnutls (CESA-2017:2292)	25 Aug 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : gnutls (EulerOS-SA-2017-1203)	11 Sep 201700:00	–	nessus

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2017-5336
gnutls	www.gnutls.org/security.html
seclists	www.seclists.org/oss-sec/2017/q1/51
ubuntu	www.ubuntu.com/security/notices/USN-3183-1
cve	www.cve.org/CVERecord

22 Apr 2026 11:27Current

7.5High risk

Vulners AI Score7.5

CVSS 39.8

EPSS0.07071