Summary
Hanno Böck discovered that Libtasn1 incorrectly handled certain ASN.1 data.
A remote attacker could possibly exploit this with specially crafted ASN.1
data and cause applications using Libtasn1 to crash, resulting in a denial
of service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libtasn1-6 | 3.4-3ubuntu0.3 |
Vulnerabilities 1
-
Unscored —CVE-2015-3622 EPSS 33%
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a de…
References
-
report
https://ubuntu.com/security/CVE-2015-3622