Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libtasn1 | Aug 30, 2017 | Jun 5, 2014 |
| Centos_linux | — | Upgrade libtasn1Upgrade libtasn1-develUpgrade gnutls-develUpgrade libtasn1-toolsUpgrade gnutlsUpgrade gnutls-utils | Dec 1, 2016 | Jun 5, 2014 |
| Debian | — | Upgrade libtasn1-3Upgrade libtasn1-6 | Jul 30, 2024 | Jun 5, 2014 |
| Gentoo Linux | — | Upgrade dev-libs/libtasn1. | Oct 30, 2017 | Jun 5, 2014 |
| Oracle Solaris | — | Upgrade library/gnutls to version 2.8.6-0.175.1.21.0.4.0 on Solaris 11.1Upgrade library/libtasn1 to version 2.8-0.175.1.21.0.4.0 on Solaris 11.1Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | May 29, 2017 | Jun 5, 2014 |
| Oracle_linux | — | Upgrade libtasn1-toolsUpgrade libtasn1Upgrade libtasn1-devel | Oct 16, 2024 | Jun 5, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 25, 2014 |
| Suse | — | Upgrade libgnutls-extra26Upgrade libgnutls26-x86Upgrade libtasn1-3-x86Upgrade libgnutls-extra-develUpgrade libtasn1Upgrade libtasn1-6-32bitUpgrade libtasn1-3Upgrade gnutlsUpgrade libgnutls26Upgrade libtasn1-develUpgrade libgnutls-develUpgrade libtasn1-3-32bitUpgrade libgnutls26-32bitUpgrade libtasn1-6 | Dec 18, 2015 | Jun 5, 2014 |
| Ubuntu | — | Upgrade libtasn1-3Upgrade libtasn1-6 | Nov 8, 2024 | Jun 5, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub