Description
Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | gnutls +1 | 1.0.20-3.2.2 | RHSA-2006:0207 |
Advisories 3
- RHSA-2006:0207 Red Hat Security Advisory: gnutls security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-986-1 gnutls11 - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-985-1 libtasn1-2 - buffer overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- 2006-0008 vendor-advisory
- 18815 third-party-advisory
- 446 third-party-advisory
- FEDORA-2006-107 vendor-advisory
- 19092 third-party-advisory
- 1015612 vdb-entry
- 23054 vdb-entry
- 18794 third-party-advisory
- 18918 third-party-advisory
- MDKSA-2006:039 vendor-advisory
- 18830 third-party-advisory
- oval:org.mitre.oval:def:10540 vdb-entry signature
- [gnutls-dev] 20060209 GnuTLS 1.2.10 - Security release mailing-list
- RHSA-2006:0207 vendor-advisory
- [gnutls-dev] 20060209 Libtasn1 0.2.18 - Tiny ASN.1 Library - Security release mailing-list
- DSA-986 vendor-advisory
- DSA-985 vendor-advisory
- ADV-2006-0496 vdb-entry
- http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup
- GLSA-200602-08 vendor-advisory
- http://www.gleg.net/protover_ssl.shtml
- gnutls-libtasn1-der-dos(24606) vdb-entry
- [gnutls-dev] 20060209 GnuTLS 1.3.4 - Experimental - Security release mailing-list
- 16568 vdb-entry
- 18832 third-party-advisory
- http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup
- USN-251-1 vendor-advisory
- 19080 third-party-advisory
- http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch
- 20060209 ProtoVer SSL: GnuTLS mailing-list
- 18898 third-party-advisory