An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libtasn1 | Mar 6, 2018 | Jan 22, 2018 |
| Debian | — | Upgrade libtasn1-6 | Feb 8, 2018 | Jan 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libtasn1-develUpgrade libtasn1 | Dec 31, 2018 | Jan 22, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libtasn1Upgrade libtasn1-devel | Feb 15, 2019 | Jan 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libtasn1Upgrade libtasn1-devel | Jan 9, 2019 | Jan 22, 2018 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Jan 22, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 22, 2018 |
| Suse | — | Upgrade libtasn1-6-32bitUpgrade libtasn1Upgrade libtasn1-6Upgrade libtasn1-devel | Jan 31, 2018 | Jan 22, 2018 |
| Ubuntu | — | Upgrade libtasn1-6 | Jan 26, 2018 | Jan 22, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub