The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libtasn1 | Aug 30, 2017 | May 12, 2015 |
| Centos_linux | — | Upgrade libtasn1-develUpgrade libtasn1-toolsUpgrade libtasn1Upgrade libtasn1-debuginfo | Aug 28, 2019 | May 12, 2015 |
| Debian | — | Upgrade libtasn1-6 | Jul 30, 2024 | May 12, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/libtasn1. | Oct 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libtasn1-develUpgrade libtasn1 | Nov 30, 2017 | May 12, 2015 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libtasn1Upgrade libtasn1-devel | Nov 30, 2017 | May 12, 2015 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | May 12, 2015 |
| Oracle_linux | — | Upgrade libtasn1Upgrade libtasn1-develUpgrade libtasn1-tools | Aug 8, 2017 | Apr 30, 2015 |
| Redhat_linux | — | Upgrade libtasn1-debuginfoUpgrade libtasn1-develUpgrade libtasn1-toolsNo solution existsUpgrade libtasn1 | Aug 6, 2017 | May 12, 2015 |
| Suse | — | Upgrade libtasn1Upgrade libtasn1-6Upgrade libgnutls28-32bitUpgrade libgnutls-openssl-develUpgrade sles12sp1-docker-imageUpgrade libtasn1-3-32bitUpgrade libgnutlsxx-develUpgrade gnutlsUpgrade libgnutls28Upgrade libtasn1-6-32bitUpgrade libtasn1-3-x86Upgrade libtasn1-3Upgrade libtasn1-develUpgrade libgnutlsxx28Upgrade sles12-docker-imageUpgrade libgnutls-develUpgrade libgnutls-openssl27 | Dec 18, 2015 | May 12, 2015 |
| Ubuntu | — | Upgrade libtasn1-3Upgrade libtasn1-6 | Nov 8, 2024 | May 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub