Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-6891

Опубликовано: 22 мая 2017
Источник: ubuntu
Приоритет: medium
CVSS2: 6.8
CVSS3: 8.8

Описание

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise/esm

not-affected

2.10-1ubuntu1.6
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

DNE

yakkety

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

4.10-1.1
esm-infra-legacy/trusty

released

3.4-3ubuntu0.5
esm-infra/xenial

released

4.7-3ubuntu0.16.04.2
precise/esm

DNE

trusty

released

3.4-3ubuntu0.5
trusty/esm

released

3.4-3ubuntu0.5
upstream

released

4.10-1.1
vivid/stable-phone-overlay

ignored

end of life
vivid/ubuntu-core

ignored

end of life
xenial

released

4.7-3ubuntu0.16.04.2

Показывать по

6.8 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
больше 8 лет назад

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

CVSS3: 8.8
nvd
больше 8 лет назад

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

CVSS3: 8.8
debian
больше 8 лет назад

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) withi ...

CVSS3: 8.8
github
больше 3 лет назад

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

suse-cvrf
больше 6 лет назад

Security update for libtasn1

6.8 Medium

CVSS2

8.8 High

CVSS3