Arbitrary Code Execution

libtasn is vulnerable to arbitrary code execution. The vulnerability exists in asn1findnode function of lib/parseraux.c due to stack-based buffer overflow which allows an attacker to process a specially malicious assignments file via utility...

USN-251-1: libtasn vulnerability

Evgeny Legerov discovered a buffer overflow in the DER format decoding function of the libtasn library. This library is mainly used by the GNU TLS library; by sending a specially crafted X.509 certificate to a server which uses TLS encryption/authentication, a remote attacker could exploit this t...