The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libtasn1 | Aug 30, 2017 | Jun 5, 2014 |
| Centos_linux | — | Upgrade gnutls-utilsUpgrade libtasn1Upgrade libtasn1-toolsUpgrade gnutlsUpgrade gnutls-develUpgrade libtasn1-devel | Dec 1, 2016 | Jun 5, 2014 |
| Debian | — | Upgrade libtasn1-3Upgrade libtasn1-6 | Jul 30, 2024 | Jun 5, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/libtasn1. | Oct 30, 2017 | Jun 5, 2014 |
| Oracle Solaris | — | Upgrade library/gnutls to version 2.8.6-0.175.1.21.0.4.0 on Solaris 11.1Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/libtasn1 to version 2.8-0.175.1.21.0.4.0 on Solaris 11.1 | May 29, 2017 | Jun 5, 2014 |
| Oracle_linux | — | Upgrade libtasn1-toolsUpgrade libtasn1Upgrade libtasn1-devel | Oct 16, 2024 | Jun 5, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 25, 2014 |
| Suse | — | Upgrade libgnutls26Upgrade libgnutls-develUpgrade libtasn1Upgrade libtasn1-6Upgrade libgnutls-extra-develUpgrade libgnutls26-32bitUpgrade gnutlsUpgrade libtasn1-6-32bitUpgrade libtasn1-3Upgrade libgnutls26-x86Upgrade libtasn1-3-32bitUpgrade libtasn1-3-x86Upgrade libtasn1-develUpgrade libgnutls-extra26 | Dec 18, 2015 | Jun 5, 2014 |
| Ubuntu | — | Upgrade libtasn1-6Upgrade libtasn1-3 | Nov 8, 2024 | Jun 5, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub