[SECURITY] [DSA 3220-1] libtasn1-3 security update

2015-04-1121:19:14

lists.debian.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0.014

Percentile

86.2%

JSON

Debian Security Advisory DSA-3220-1 [email protected]
http://www.debian.org/security/ Salvatore Bonaccorso
April 11, 2015 http://www.debian.org/security/faq

Package : libtasn1-3
CVE ID : CVE-2015-2806

Hanno Boeck discovered a stack-based buffer overflow in the
asn1_der_decoding function in Libtasn1, a library to manage ASN.1
structures. A remote attacker could take advantage of this flaw to cause
an application using the Libtasn1 library to crash, or potentially to
execute arbitrary code.

For the stable distribution (wheezy), this problem has been fixed in
version 2.13-2+deb7u2.

We recommend that you upgrade your libtasn1-3 packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7alllibtasn1-3< 2.13-2+deb7u2libtasn1-3_2.13-2+deb7u2_all.deb
Debian7armellibtasn1-3-bin< 2.13-2+deb7u2libtasn1-3-bin_2.13-2+deb7u2_armel.deb
Debian7powerpclibtasn1-3-dev< 2.13-2+deb7u2libtasn1-3-dev_2.13-2+deb7u2_powerpc.deb
Debian7ia64libtasn1-3-dbg< 2.13-2+deb7u2libtasn1-3-dbg_2.13-2+deb7u2_ia64.deb
Debian7amd64libtasn1-3-dbg< 2.13-2+deb7u2libtasn1-3-dbg_2.13-2+deb7u2_amd64.deb
Debian7powerpclibtasn1-3< 2.13-2+deb7u2libtasn1-3_2.13-2+deb7u2_powerpc.deb
Debian7amd64libtasn1-3< 2.13-2+deb7u2libtasn1-3_2.13-2+deb7u2_amd64.deb
Debian7sparclibtasn1-3< 2.13-2+deb7u2libtasn1-3_2.13-2+deb7u2_sparc.deb
Debian7mipsellibtasn1-3-dbg< 2.13-2+deb7u2libtasn1-3-dbg_2.13-2+deb7u2_mipsel.deb
Debian7kfreebsd-i386libtasn1-3-dev< 2.13-2+deb7u2libtasn1-3-dev_2.13-2+deb7u2_kfreebsd-i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	libtasn1-3	< 2.13-2+deb7u2	libtasn1-3_2.13-2+deb7u2_all.deb
Debian	7	armel	libtasn1-3-bin	< 2.13-2+deb7u2	libtasn1-3-bin_2.13-2+deb7u2_armel.deb
Debian	7	powerpc	libtasn1-3-dev	< 2.13-2+deb7u2	libtasn1-3-dev_2.13-2+deb7u2_powerpc.deb
Debian	7	ia64	libtasn1-3-dbg	< 2.13-2+deb7u2	libtasn1-3-dbg_2.13-2+deb7u2_ia64.deb
Debian	7	amd64	libtasn1-3-dbg	< 2.13-2+deb7u2	libtasn1-3-dbg_2.13-2+deb7u2_amd64.deb
Debian	7	powerpc	libtasn1-3	< 2.13-2+deb7u2	libtasn1-3_2.13-2+deb7u2_powerpc.deb
Debian	7	amd64	libtasn1-3	< 2.13-2+deb7u2	libtasn1-3_2.13-2+deb7u2_amd64.deb
Debian	7	sparc	libtasn1-3	< 2.13-2+deb7u2	libtasn1-3_2.13-2+deb7u2_sparc.deb
Debian	7	mipsel	libtasn1-3-dbg	< 2.13-2+deb7u2	libtasn1-3-dbg_2.13-2+deb7u2_mipsel.deb
Debian	7	kfreebsd-i386	libtasn1-3-dev	< 2.13-2+deb7u2	libtasn1-3-dev_2.13-2+deb7u2_kfreebsd-i386.deb