DEBIAN-CVE-2014-3469

The 1 asn1readvaluetype and 2 asn1readvalue functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via a NULL value in an ivalue argument...

DEBIAN-CVE-2014-3467

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service out-of-bounds read via crafted ASN.1 data...

UBUNTU-CVE-2014-3467

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service out-of-bounds read via crafted ASN.1 data...

UBUNTU-CVE-2014-3469

The 1 asn1readvaluetype and 2 asn1readvalue functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via a NULL value in an ivalue argument...

libtasn1: asn1_read_value_type() NULL pointer dereference

The 1 asn1readvaluetype and 2 asn1readvalue functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service NULL pointer dereference and crash via a NULL value in an ivalue argument...

libtasn1: multiple boundary check issues

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service out-of-bounds read via crafted ASN.1 data...

libtasn1: asn1_get_bit_der() can return negative bit length

The asn1getbitder function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data...

PT-2014-1914

Name of the Vulnerable Software and Affected Versions strongSwan versions prior to 5.1.2 strongSwan versions prior to 5.1.3 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and IKE daemon crash, via a crafted ID DER ASN1 DN ID...

CVE-2013-6420

CVE-2013-6420 : In PHP, the function asn1_time_to_time_t in ext/openssl/openssl.c fails to parse notBefore/notAfter in X.509 certificates, enabling a crafted certificate to cause remote code execution or memory corruption via openssl_x509_parse. Affected: PHP versions before 5.3.28, 5.4.x before ...

PHP openssl_x509_parse() Memory Corruption Vulnerability

Exploit for php platform in category dos / poc Overview: Quote from http://www.php.net "PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML." The PHP function opensslx509parse uses a helper function called...

PHP - openssl_x509_parse() Memory Corruption

PHP - opensslx509parse Memory Corruption SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP opensslx509parse Memory Corruption Vulnerability Release Date: 2013/12/13 Last Modified: 2013/12/13 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 4.0.6 - PHP 4.4...

PHP openssl_x509_parse() Memory Corruption Vulnerability

The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes outside of an allocated...

FreeBSD : PHP5 -- memory corruption in openssl_x509_parse() (47b4e713-6513-11e3-868f-0025905a4771)

Stefan Esser reports : The PHP function opensslx509parse uses a helper function called asn1timetotimet to convert timestamps from ASN1 string format into integer timestamp values. The parser within this helper function is not binary safe and can therefore be tricked to write up to five NUL bytes...

PHP openssl_x509_parse() Memory Corruption

SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP opensslx509parse Memory Corruption Vulnerability Release Date: 2013/12/13 Last Modified: 2013/12/13 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 4.0.6 - PHP 4.4.9 PHP 5.0.x PHP 5.1.x PHP 5.2.x PHP 5.3....

PT-2013-1334

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.28 PHP versions 5.4.x prior to 5.4.23 PHP versions 5.5.x prior to 5.5.7 Description The issue arises from the improper parsing of notBefore and notAfter timestamps in X.509 certificates by the asn1 time to time t...

PT-2013-1152

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8zd OpenSSL versions prior to 1.0.0p OpenSSL versions prior to 1.0.1k openssl-1.0.1e openssl-devel-1.0.1e openssl-static-1.0.1e openssl-libs-1.0.1e openssl-debuginfo-1.0.1e Description The issue allows remote...

PT-2013-1367 · Perl +6 · Convert::Asn1 +6

Name of the Vulnerable Software and Affected Versions: perl-Convert-ASN1 versions 0.27 and earlier Description: The issue is related to the Convert::ASN1 module for Perl, which can lead to an infinite loop when encountering unexpected input. This can be exploited by a remote attacker to cause a...

PT-2013-1255

Name of the Vulnerable Software and Affected Versions strongSwan versions 4.1.11 through 5.0.4 strongSwan versions prior to 5.1.0 Description The issue affects the strongSwan package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected...

Fedora Update for nodejs-asn1 FEDORA-2013-11780

Check for the Version of nodejs-asn1 OpenVAS Vulnerability Test Fedora Update for nodejs-asn1 FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for nodejs-asn1 FEDORA-2013-11780

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...