CVE-2017-12966

Опубликовано: 20 авг. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.

Ссылки

https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ
Exploit
Mailing List
Third Party Advisory
https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:asn1c_project:asn1c:0.9.28:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.0108

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-12966

CVSS3: 6.5

ubuntu

около 9 лет назад

The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.

CVE-2017-12966

CVSS3: 6.5

debian

около 9 лет назад

The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1 ...

GHSA-968h-hqr4-4xp2

CVSS3: 6.5

github

больше 4 лет назад

The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.

EPSS

Процентиль: 63%

0.0108

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119