Описание
Security update for libtasn1
The ASN.1 parsing library libtasn1 was updated to fix one memory handling issue.
The following vulnerability was fixed:
- CVE-2015-2806: A stack-based buffer overflow in libtasn1 allowed remote attackers to have unspecified impact via unknown vectors.
Список пакетов
SUSE Linux Enterprise Desktop 12
libtasn1-3.7-4.1
libtasn1-6-3.7-4.1
libtasn1-6-32bit-3.7-4.1
SUSE Linux Enterprise Server 12
libtasn1-3.7-4.1
libtasn1-6-3.7-4.1
libtasn1-6-32bit-3.7-4.1
SUSE Linux Enterprise Server for SAP Applications 12
libtasn1-3.7-4.1
libtasn1-6-3.7-4.1
libtasn1-6-32bit-3.7-4.1
SUSE Linux Enterprise Software Development Kit 12
libtasn1-devel-3.7-4.1
Ссылки
- Link for SUSE-SU-2015:0904-1
- E-Mail link for SUSE-SU-2015:0904-1
- SUSE Security Ratings
- SUSE Bug 924828
- SUSE CVE CVE-2015-2806 page
Описание
Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
Затронутые продукты
SUSE Linux Enterprise Desktop 12:libtasn1-3.7-4.1
SUSE Linux Enterprise Desktop 12:libtasn1-6-3.7-4.1
SUSE Linux Enterprise Desktop 12:libtasn1-6-32bit-3.7-4.1
SUSE Linux Enterprise Server 12:libtasn1-3.7-4.1
Ссылки
- CVE-2015-2806
- SUSE Bug 924828
- SUSE Bug 929414
- SUSE Bug 961491
- SUSE Bug 969208