ALT-PU-2015-1469

Низкий

ALT-PU-2015-1469: package libtasn1 update to version 4.5-alt1

Источник

errata.altlinux.org

Дата публикации

27.05.2015

Дата обновления

27.05.2015

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades libtasn1 to version 4.5-alt1.

Устраненные уязвимости1

CVE-2015-3622

Средний 4.3

Дата публикации: 12.05.2015

CWE-119

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

CVSS 2.0

Средний 4.3

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2015-3622 https://nvd.nist.gov/vuln/detail/CVE-2015-3622

Ссылки1

ALT-PU-2015-1469 https://errata.altlinux.org/ALT-PU-2015-1469

Связанные уязвимости

CVE-2015-3622

ubuntu

больше 11 лет назад

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

CVE-2015-3622

CVSS3: 5.9

redhat

больше 11 лет назад

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

CVE-2015-3622

nvd

больше 11 лет назад

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

CVE-2015-3622

debian

больше 11 лет назад

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 ...

GHSA-359p-x9w8-8g33

github

больше 4 лет назад

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.