libtasn1/libtasn1_array2tree_fuzzer: Heap-use-after-free in _asn1_expand_object_id

Project: https://gitlab.com/gnutls/libtasn1.git Detailed report: https://oss-fuzz.com/testcase?key=5740385426472960 Project: libtasn1 Fuzzer: afllibtasn1array2treefuzzer Fuzz target binary: libtasn1array2treefuzzer Job Type: aflasanlibtasn1 Platform Id: linux Crash Type: Heap-use-after-free READ ...

The vulnerability of the _asn1_expand_object_id function (p_tree) in the Libtasn1 library of the Debian GNU/Linux operating system, related to resource management errors, allows a perpetrator to cause a service failure.

The vulnerability of the asn1expandobjectid function in the Libtasn1 library for the Debian GNU/Linux operating system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE SLED15 / SLES15 Security Update : libtasn1 (SUSE-SU-2019:1372-2)

This update for libtasn1 fixes the following issues : Security issue fixed : CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE-SU-2019:1372-2 Security update for libtasn1

This update for libtasn1 fixes the following issues: Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435...

openSUSE Security Update : libtasn1 (openSUSE-2019-1510)

This update for libtasn1 fixes the following issues : Security issues fixed : - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. - CVE-2017-6891: Fixed a stack overflow in asn1findnode bsc1040621. This update was imported from the SUSE:SLE-12-SP3:Update update project...

openSUSE: Security Advisory for libtasn1 (openSUSE-SU-2019:1510-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libtasn1 (moderate)

openSUSE Security Update: Security update for libtasn1 Announcement ID: openSUSE-SU-2019:1510-1 Rating: moderate References: 1040621 1105435 Cross-References: CVE-2017-6891 CVE-2018-1000654 Affected Products: openSUSE Leap 42.3 An update that fixes two vulnerabilities is now available. Descriptio...

openSUSE Security Update : libtasn1 (openSUSE-2019-1498)

This update for libtasn1 fixes the following issues : Security issue fixed : - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks i...

openSUSE: Security Advisory for libtasn1 (openSUSE-SU-2019:1498-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1498-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libtasn1 (moderate)

openSUSE Security Update: Security update for libtasn1 Announcement ID: openSUSE-SU-2019:1498-1 Rating: moderate References: 1105435 Cross-References: CVE-2018-1000654 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: Th...

SUSE SLED12 / SLES12 Security Update : libtasn1 (SUSE-SU-2019:1379-1)

This update for libtasn1 fixes the following issues : Security issues fixed : CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. CVE-2017-6891: Fixed a stack overflow in asn1findnode bsc1040621. Note that Tenable Network Security has extracted the preceding description blo...

SUSE-SU-2019:1379-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: Security issues fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. - CVE-2017-6891: Fixed a stack overflow in asn1findnode bsc1040621...

SUSE SLED15 / SLES15 Security Update : libtasn1 (SUSE-SU-2019:1372-1)

This update for libtasn1 fixes the following issues : Security issue fixed : CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE-SU-2019:1372-1 Security update for libtasn1

This update for libtasn1 fixes the following issues: Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser bsc1105435...

Denial Of Service (DoS)

GNU Libtasn1 is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit the vulnerable asn1extractderoctet function to cause an out-of-bounds heap read via a crafted certificate leading to a system crash...

Denial Of Service (DoS)

The GnuTLS library provides support for cryptographic algorithms and for protocols such as Transport Layer Security TLS. The gnutls packages also include the libtasn1 library, which provides Abstract Syntax Notation One ASN.1 parsing and structures management, and Distinguished Encoding Rules DER...

EulerOS 2.0 SP3 : libtasn1 (EulerOS-SA-2019-1312)

According to the version of the libtasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Two errors in the 'asn1findnode' function lib/parseraux.c within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer...

EulerOS 2.0 SP2 : libtasn1 (EulerOS-SA-2019-1311)

According to the version of the libtasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Two errors in the 'asn1findnode' function lib/parseraux.c within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer...

EulerOS Virtualization 2.5.3 : libtasn1 (EulerOS-SA-2019-1208)

According to the version of the libtasn1 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the...