Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3468
HistoryJun 05, 2014 - 8:55 p.m.

CVE-2014-3468

2014-06-0520:55:00
CWE-131
[email protected]
web.nvd.nist.gov
56
cve-2014-3468
gnu libtasn1
security vulnerability
asn.1
out-of-bounds access

5.1 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.5%

JSON

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.

References

Related

veracode 2
prion 1
debiancve 1
ubuntucve 1
f5 2
nessus 26
suse 6
osv 1
openvas 26
debian 2
fedora 2
redhat 4
centos 2
ubuntu 1
slackware 2
gentoo 1
mageia 1
amazon 1
oraclelinux 3
securityvulns 2
rosalinux 1
veracode
veracode
Out-of-Bounds Access
2018-08-13 08:27:26
Denial Of Service (DoS)
2019-05-02 05:03:32
prion
prion
Out-of-bounds
2014-06-05 20:55:00
debiancve
debiancve
CVE-2014-3468
2014-06-05 20:55:00
ubuntucve
ubuntucve
CVE-2014-3468
2014-06-05 00:00:00
f5
f5
SOL15423 - GNU Libtasn1 vulnerabilities CVE-2014-3467 and CVE-2014-3468
2014-07-17 00:00:00
K15423 : GNU Libtasn1 vulnerabilities CVE-2014-3467 and CVE-2014-3468
2014-07-17 00:00:00
nessus
nessus
Oracle Solaris Third-Party Patch Update : libtasn1 (multiple_vulnerabilities_in_gnu_libtasn1)
2015-01-19 00:00:00
Amazon Linux AMI : libtasn1 (ALAS-2014-359)
2014-10-12 00:00:00
Scientific Linux Security Update : libtasn1 on SL6.x i386/x86_64 (20140603)
2014-06-04 00:00:00
suse
suse
Security update for libtasn1 (important)
2014-07-24 03:05:20
Security update for gnutls (important)
2014-06-05 03:04:15
Security update for GnuTLS (important)
2014-06-13 00:04:29
osv
osv
libtasn1-3 - security update
2014-10-26 00:00:00
openvas
openvas
CentOS Update for libtasn1 CESA-2014:0596 centos6
2014-06-09 00:00:00
SUSE: Security Advisory for libtasn1 (SUSE-SU-2014:0931-1)
2015-10-13 00:00:00
Fedora Update for libtasn1 FEDORA-2014-6895
2014-06-09 00:00:00
debian
debian
[SECURITY] [DLA 77-1] libtasn1-3 security update
2014-10-26 13:15:15
[SECURITY] [DSA 3056-1] libtasn1-3 security update
2014-10-26 12:44:20
fedora
fedora
[SECURITY] Fedora 19 Update: libtasn1-3.6-1.fc19
2014-06-10 03:06:24
[SECURITY] Fedora 20 Update: libtasn1-3.6-1.fc20
2014-06-04 07:52:16
redhat
redhat
(RHSA-2014:0596) Moderate: libtasn1 security update
2014-06-03 00:00:00
(RHSA-2014:0687) Moderate: libtasn1 security update
2014-06-10 00:00:00
(RHSA-2014:0594) Important: gnutls security update
2014-06-03 00:00:00
centos
centos
libtasn1 security update
2014-06-04 10:04:23
gnutls security update
2014-06-04 09:31:23
ubuntu
ubuntu
Libtasn1 vulnerabilities
2014-07-22 00:00:00
slackware
slackware
[slackware-security] libtasn1
2014-06-06 05:26:49
[slackware-security] gnutls
2014-06-06 05:26:16
gentoo
gentoo
GNU Libtasn1: Multiple vulnerabilities
2014-08-29 00:00:00
mageia
mageia
Updated libtasn1 packages fix CVE-2014-3467-9
2014-06-02 22:44:30
amazon
amazon
Medium: libtasn1
2014-06-15 16:22:00
oraclelinux
oraclelinux
libtasn1 security update
2014-07-23 00:00:00
libtasn1 security update
2014-06-03 00:00:00
gnutls security update
2014-06-03 00:00:00
securityvulns
securityvulns
GnuTLS and libtasn1 multiple security vulnerabilities
2014-06-02 00:00:00
[oss-security] GnuTLS and libtasn1 security fixes
2014-06-02 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1847
2021-07-02 16:58:09

5.1 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.5%

JSON
Related for CVE-2014-3468
veracode2prion1debiancve1ubuntucve1f52nessus26suse6osv1openvas26debian2fedora2redhat4centos2ubuntu1slackware2gentoo1mageia1amazon1oraclelinux3securityvulns2rosalinux1