The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libtasn1 | Aug 30, 2017 | May 12, 2015 |
| Centos_linux | — | Upgrade libtasn1-develUpgrade libtasn1-toolsUpgrade libtasn1Upgrade libtasn1-debuginfo | Aug 28, 2019 | May 12, 2015 |
| Debian | — | Upgrade libtasn1-6 | Jul 30, 2024 | May 12, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/libtasn1. | Oct 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtasn1-develUpgrade libtasn1 | Nov 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libtasn1Upgrade libtasn1-devel | Nov 30, 2017 | May 12, 2015 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | May 12, 2015 |
| Oracle_linux | — | Upgrade libtasn1Upgrade libtasn1-develUpgrade libtasn1-tools | Aug 8, 2017 | Apr 30, 2015 |
| Redhat_linux | — | Upgrade libtasn1-develUpgrade libtasn1-toolsNo solution existsUpgrade libtasn1Upgrade libtasn1-debuginfo | Aug 6, 2017 | May 12, 2015 |
| Suse | — | Upgrade sles12sp1-docker-imageUpgrade libgnutls-openssl-develUpgrade libtasn1-3-32bitUpgrade libtasn1Upgrade libtasn1-6Upgrade libgnutls28-32bitUpgrade libgnutlsxx-develUpgrade libgnutls-develUpgrade libtasn1-develUpgrade sles12-docker-imageUpgrade libgnutlsxx28Upgrade libtasn1-3Upgrade libgnutls-openssl27Upgrade libtasn1-3-x86Upgrade libgnutls28Upgrade libtasn1-6-32bitUpgrade gnutls | Dec 18, 2015 | May 12, 2015 |
| Ubuntu | — | Upgrade libtasn1-6Upgrade libtasn1-3 | Nov 8, 2024 | May 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub