2 matches found
MGASA-2017-0159 Updated libtasn1 packages fix security vulnerability
Jakub Jirasek of Secunia Research discovered that libtasn1 did not properly validate its input. This would allow an attacker to cause a crash by denial-of-service, or potentially execute arbitrary code, by tricking a user into processing a maliciously crafted assignments file CVE-2017-6891...
8.8CVSS8.8AI score0.05585EPSS
SaveExploits0References3
Updated libtasn1 packages fix CVE-2015-3622
Updated libtasn1 packages fix security vulnerability: A malformed certificate input could cause a heap overflow read in the DER decoding functions of Libtasn1. The heap overflow happens in the function asn1extractderoctet CVE-2015-3622...
4.3CVSS6.4AI score0.33094EPSS
SaveExploits1References3
20