Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2018-1088

Высокий

ALT-PU-2018-1088: package libtasn1 update to version 4.13-alt1

Источник
errata.altlinux.org
Дата публикации
25.01.2018
Дата обновления
25.01.2018
Устраненные уязвимости
3

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libtasn1 to version 4.13-alt1.

Устраненные уязвимости3

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 9 лет назад

An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.

CVSS3: 7.5
redhat
почти 9 лет назад

An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.

CVSS3: 7.5
nvd
почти 9 лет назад

An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.

CVSS3: 7.5
debian
почти 9 лет назад

An issue was discovered in the _asn1_decode_simple_ber function in dec ...

CVSS3: 7.5
ubuntu
больше 9 лет назад

The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.