Medium ELSA-2014-0687 3 CVEs

Moderate: libtasn1 security update (Oracle Linux 7)

Published Jul 23, 2014 · Updated Jul 23, 2014

Ecosystem: Oracle Linux

Summary

[3.3-5]
- Added missing check for null pointer (#1102338)

[3.3-4]
- Fix multiple decoding issues (#1102338)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libtasn1	0:3.3-5.el7_0
Oracle Linux · 7	libtasn1-devel	0:3.3-5.el7_0
Oracle Linux · 7	libtasn1-tools	0:3.3-5.el7_0

Vulnerabilities 3

Unscored —

CVE-2014-3467

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote att…

libtasn1-6 libtasn1-6 Debian Ubuntu

Jun 5, 2014
Unscored —

CVE-2014-3468

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length i…

libtasn1-6 libtasn1-6 Debian Ubuntu

Jun 5, 2014
Unscored —

CVE-2014-3469

The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent atta…

libtasn1-6 libtasn1-6 Debian Ubuntu

Jun 5, 2014