Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-17362
HistoryOct 09, 2019 - 1:15 a.m.

Out-of-bounds

2019-10-0901:15:00
PRIOn knowledge base
www.prio-n.com
3

8.6 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.3%

In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.

CPENameOperatorVersion
debian_linuxeq8.0
libtomcryptle1.18.2