Lucene search
+L

99 matches found

osv_cve
osv_cve
•added 2024/08/24 11:15 p.m.•34 views

CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

7.5CVSS6.8AI score
SaveExploits0References2
osv_debian
osv_debian
•added 2024/08/24 11:15 p.m.•18 views

DEBIAN-CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

7.5CVSS5.9AI score0.00452EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/08/24 11:15 p.m.•31 views

CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

7.5CVSS5.9AI score0.00452EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/08/24 12:00 a.m.•53 views

CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

0.00452EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/24 12:00 a.m.•18 views

CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

5.9AI score0.00452EPSS
SaveExploits0References1
Mend
Mend
•added 2024/08/24 12:00 a.m.•15 views

CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

8.7CVSS5.9AI score0.00452EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2024/08/24 12:00 a.m.•72 views

CVE-2024-45234

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a signedAttrs encoded in non-canonical form. This bypasses Fort's BER decoder, reaching a point in the code that panics...

7.5CVSS5.9AI score0.00452EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 5:15 a.m.•15 views

SUSE CVE-2015-5727

The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service memory consumption via unspecified vectors, related to a length field...

7.5CVSS6.9AI score0.01483EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:03 a.m.•13 views

SUSE CVE-2016-4353

ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service abort via crafted BER data...

7.5CVSS6.8AI score0.02149EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:03 a.m.•12 views

SUSE CVE-2016-4355

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service crash via crafted BER data, which leads to a buffer overflow...

7.5CVSS7.2AI score0.02149EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 4:31 a.m.•13 views

SUSE CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS7AI score0.02825EPSS
SaveExploits0References20
Veracode
Veracode
•added 2020/05/10 11:25 p.m.•28 views

Denial Of Service (DoS)

libtasn is vulnerable to denial of service DoS. The vulnerability exists in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS4.1AI score0.02825EPSS
SaveExploits0References9Affected Software1
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•36 views

Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2019-1212)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02825EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/01/23 9:19 a.m.•34 views

CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS3.8AI score0.02825EPSS
SaveExploits0References1
NVD
NVD
•added 2018/01/22 8:29 p.m.•36 views

CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS7.4AI score0.02825EPSS
SaveExploits0References7
osv_alpine
osv_alpine
•added 2018/01/22 8:29 p.m.•19 views

ALPINE-CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS7AI score0.02825EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2018/01/22 8:29 p.m.•10 views

DEBIAN-CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS6.3AI score0.02825EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2018/01/22 8:00 p.m.•77 views

CVE-2018-6003

An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS...

7.5CVSS6.4AI score0.02825EPSS
SaveExploits0
osv_debian
osv_debian
•added 2016/06/13 7:59 p.m.•10 views

DEBIAN-CVE-2016-4355

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service crash via crafted BER data, which leads to a buffer overflow...

7.5CVSS7.4AI score0.02149EPSS
SaveExploits0References1
Prion
Prion
•added 2016/06/13 7:59 p.m.•20 views

Stack overflow

ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service abort via crafted BER data...

5CVSS7AI score0.02149EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder