Summary
It was discovered that Libtasn1 incorrectly handled certain files.
If a user were tricked into opening a crafted file, an attacker could possibly
use this to cause a denial of service. This issue only affected Ubuntu 14.04
LTS and Ubuntu 16.04 LTS. (CVE-2017-10790)
It was discovered that Libtasn1 incorrectly handled certain inputs.
An attacker could possibly use this to cause Libtasn1 to hang, resulting
in a denial of service. This issue only affected Ubuntu 16.04 LTS and
Ubuntu 17.10. (CVE-2018-6003)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libtasn1-6 | 3.4-3ubuntu0.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | libtasn1-6 | 4.7-3ubuntu0.16.04.3 |
Vulnerabilities 2
-
Unscored —
The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when readi…
-
Unscored —
An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited re…