1053 matches found
Debian DSA-4795-1 : krb5 - security update
Demi Obeneour discovered that unbounded recursion in the ASN1 parser of libkrb5 could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4795. The text itself is copyright C Software...
[SECURITY] [DSA 4795-1] krb5 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4795-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 21, 2020 https://www.debian.org/security/faq -...
USN-4635-1 krb5 vulnerability
Demi Obenour discovered that Kerberos incorrectly handled certain ASN.1. An attacker could possibly use this issue to cause a denial of service...
opensc: Out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c
OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1decodeentry in libopensc/asn1.c...
OSV-2020-1965 UNKNOWN READ in asn1_item_print_ctx
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920 Crash type: UNKNOWN READ Crash state: asn1itemprintctx asn1templateprintctx asn1itemprintctx...
cups: stack-buffer-overflow in libcups's asn1_get_type function
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...
cups: stack-buffer-overflow in libcups's asn1_get_packed function
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...
EulerOS 2.0 SP3 : opensc (EulerOS-SA-2020-2066)
According to the versions of the opensc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c.CVE-2019-15945 - OpenSC before...
OSV-2020-514 UNKNOWN READ in asn1_item_print_ctx
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14546 Crash type: UNKNOWN READ Crash state: asn1itemprintctx asn1templateprintctx asn1itemprintctx...
The vulnerability of the asn1_get_type function in the libcups printing server library allows a attacker to cause a service failure.
The vulnerability of the asn1gettype function in the libcups printing server library is due to a buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
cups: stack-buffer-overflow in libcups's asn1_get_packed function
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...
perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
An update is available for perl-LDAP, perl-Convert-ASN1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see...
ALEA-2020:1575 perl-Convert-ASN1 and perl-LDAP bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
DEBIAN-CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
Input validation
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected input...
CVE-2013-7488
CVE-2013-7488 affects perl-Convert-ASN1 (Convert::ASN1) through 0.27. Connected Nessus advisories from MiracleLinux, Alibaba Cloud Linux, TencentOS/TencentOS Server, Oracle Linux, Red Hat/CentOS/AlmaLinux, and Astra Linux reference that updates exist to fix this issue, citing “infinite loop via u...