MGASA-2015-0200 Updated libtasn1 packages fix CVE-2015-3622

🗓️ 06 May 2015 17:44:06Reported by GoogleType

osv

osv🔗 osv.dev👁 9 Views

Updated libtasn1 packages resolve heap overflow vulnerability in DER decoding functions.

Reporter	Title	Published	Views	Family All 74
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by vulnerabilities in libtasn1 (CVE-2015-3622, CVE-2015-2806)	16 Jun 201822:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in libtasn1 (CVE-2015-2806, CVE-2015-3622)	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libtasn1 affect PowerKVM	18 Jun 201801:37	–	ibm
ArchLinux	libtasn1: arbitrary code execution	8 May 201500:00	–	archlinux
Tenable Nessus	CentOS 7 : libtasn1 (CESA-2017:1860)	25 Aug 201700:00	–	nessus
Tenable Nessus	Debian DSA-3256-1 : libtasn1-6 - security update	11 May 201500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : libtasn1 (EulerOS-SA-2017-1171)	8 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : libtasn1 (EulerOS-SA-2017-1172)	8 Sep 201700:00	–	nessus
Tenable Nessus	Fedora 21 : libtasn1-4.5-1.fc21 (2015-7288)	20 May 201500:00	–	nessus

Source	Link
advisories	www.advisories.mageia.org/MGASA-2015-0200.html
bugs	www.bugs.mageia.org/show_bug.cgi
blog	www.blog.fuzzing-project.org/9-Heap-overflow-invalid-read-in-Libtasn1-TFPA-0052015.html
openwall	www.openwall.com/lists/oss-security/2015/04/30/6

16 Apr 2026 06:25Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.3

EPSS0.06062

libtasn1 packages security vulnerability heap overflow der decoding cve 2015 3622