[SECURITY] [DLA 2255-1] libtasn1-6 security update

2020-06-2812:07:32

lists.debian.org

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.019 Low

EPSS

Percentile

88.5%

JSON

Package : libtasn1-6
Version : 4.2-3+deb8u4
CVE ID : CVE-2017-10790

A vulnerability has been discovered in Libtasn1, a library to manage
ASN.1 structures, allowing a remote attacker to cause a denial of service
against an application using the Libtasn1 library.

For Debian 8 "Jessie", this problem has been fixed in version
4.2-3+deb8u4.

We recommend that you upgrade your libtasn1-6 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian9armellibtasn1-6< 4.10-1.1+deb9u1libtasn1-6_4.10-1.1+deb9u1_armel.deb
Debian8i386libtasn1-6< 4.2-3+deb8u4libtasn1-6_4.2-3+deb8u4_i386.deb
Debian9armhflibtasn1-bin-dbgsym< 4.10-1.1+deb9u1libtasn1-bin-dbgsym_4.10-1.1+deb9u1_armhf.deb
Debian9arm64libtasn1-6-dbgsym< 4.10-1.1+deb9u1libtasn1-6-dbgsym_4.10-1.1+deb9u1_arm64.deb
Debian9arm64libtasn1-6< 4.10-1.1+deb9u1libtasn1-6_4.10-1.1+deb9u1_arm64.deb
Debian7amd64libtasn1-3-bin< 2.13-2+deb7u5libtasn1-3-bin_2.13-2+deb7u5_amd64.deb
Debian9armhflibtasn1-6-dev< 4.10-1.1+deb9u1libtasn1-6-dev_4.10-1.1+deb9u1_armhf.deb
Debian7i386libtasn1-3< 2.13-2+deb7u5libtasn1-3_2.13-2+deb7u5_i386.deb
Debian9alllibtasn1-3-bin< 4.10-1.1+deb9u1libtasn1-3-bin_4.10-1.1+deb9u1_all.deb
Debian9mipsellibtasn1-6-dev< 4.10-1.1+deb9u1libtasn1-6-dev_4.10-1.1+deb9u1_mipsel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	armel	libtasn1-6	< 4.10-1.1+deb9u1	libtasn1-6_4.10-1.1+deb9u1_armel.deb
Debian	8	i386	libtasn1-6	< 4.2-3+deb8u4	libtasn1-6_4.2-3+deb8u4_i386.deb
Debian	9	armhf	libtasn1-bin-dbgsym	< 4.10-1.1+deb9u1	libtasn1-bin-dbgsym_4.10-1.1+deb9u1_armhf.deb
Debian	9	arm64	libtasn1-6-dbgsym	< 4.10-1.1+deb9u1	libtasn1-6-dbgsym_4.10-1.1+deb9u1_arm64.deb
Debian	9	arm64	libtasn1-6	< 4.10-1.1+deb9u1	libtasn1-6_4.10-1.1+deb9u1_arm64.deb
Debian	7	amd64	libtasn1-3-bin	< 2.13-2+deb7u5	libtasn1-3-bin_2.13-2+deb7u5_amd64.deb
Debian	9	armhf	libtasn1-6-dev	< 4.10-1.1+deb9u1	libtasn1-6-dev_4.10-1.1+deb9u1_armhf.deb
Debian	7	i386	libtasn1-3	< 2.13-2+deb7u5	libtasn1-3_2.13-2+deb7u5_i386.deb
Debian	9	all	libtasn1-3-bin	< 4.10-1.1+deb9u1	libtasn1-3-bin_4.10-1.1+deb9u1_all.deb
Debian	9	mipsel	libtasn1-6-dev	< 4.10-1.1+deb9u1	libtasn1-6-dev_4.10-1.1+deb9u1_mipsel.deb