1182 matches found
libtasn1 tiny ASN.1 library / GnuTLS TLS implementation multiple security issues
Out-of-bounds access and buffer overflows in DER decoding...
DSA-986-1 gnutls11 - buffer overflows
Bulletin has no description...
USN-251-1: libtasn vulnerability
Evgeny Legerov discovered a buffer overflow in the DER format decoding function of the libtasn library. This library is mainly used by the GNU TLS library; by sending a specially crafted X.509 certificate to a server which uses TLS encryption/authentication, a remote attacker could exploit this t...
GLSA-200602-08 : libtasn1, GNU TLS: Security flaw in DER decoding
The remote host is affected by the vulnerability described in GLSA-200602-08 libtasn1, GNU TLS: Security flaw in DER decoding Evgeny Legerov has reported a flaw in the DER decoding routines provided by libtasn1, which could cause an out of bounds access to occur. Impact : A remote attacker could...
libtasn1, GNU TLS: Security flaw in DER decoding
Background Libtasn1 is a library used to parse ASN.1 Abstract Syntax Notation One objects, and perform DER Distinguished Encoding Rules decoding. Libtasn1 is included with the GNU TLS library, which is used by applications to provide a cryptographically secure communications channel. Description...
Important: Red Hat Security Advisory: gnutls security update
Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GNU TLS Library provides support for cryptographic algorithms and protocols such as TLS. GN...
Design/Logic Flaw
Tiny ASN.1 Library libtasn1 before 0.2.18, as used by 1 GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and 2 GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test...
CVE-2006-0645
Tiny ASN.1 Library libtasn1 before 0.2.18, as used by 1 GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and 2 GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test...
CVE-2006-0645
Tiny ASN.1 Library libtasn1 before 0.2.18, as used by 1 GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and 2 GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test...
CVE-2006-0645
The CVE-2006-0645 entry concerns Tiny ASN.1 Library (libtasn1) before 0.2.18, used by GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and by GNU Shishi. The issue is an out-of-bounds access in the DER decoder caused by invalid input, which can crash the DER decoder and possibly allow arbitrary...
CVE-2006-0645
Tiny ASN.1 Library libtasn1 before 0.2.18, as used by 1 GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and 2 GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test...
[gnutls-dev] Libtasn1 0.2.18 - Tiny ASN.1 Library - Security release
All, this release fixes several serious bugs that would make the DER decoder in libtasn1 crash on invalid input. The problems were reported by Evgeny Legerov on the 31th of January. New releases of GnuTLS will follow later today. We invite more detailed analysis of the problem, following our...
CVE-2003-1119: Undefined Security Weakness
SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets...
CVE-2004-0401
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions...
CVE-2004-0401
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions...
CVE-2004-0401
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions...
CVE-2004-0401
CVE-2004-0401 affects libtasn1 in the 0.1.x line prior to 0.1.2 and the 0.2.x line prior to 0.2.7, with the underlying issue in the DER parsing functions. The vulnerability is described as unknown but severe (CVSSv2 base score 10.0; Confidentiality, Integrity, and Availability impacts all complet...
CVE-2004-0401: Undefined Security Weakness
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions...
