In LibTomCrypt through 1.18.2 the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.

...

EulerOS 2.0 SP9 : libtomcrypt (EulerOS-SA-2021-2247)

According to the version of the libtomcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain invalid UTF-8...

EulerOS 2.0 SP8 : libtomcrypt (EulerOS-SA-2021-2303)

According to the version of the libtomcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain invalid UTF-8...

Huawei EulerOS: Security Advisory for libtomcrypt (EulerOS-SA-2021-2247)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtomcrypt (EulerOS-SA-2021-2273)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtomcrypt (EulerOS-SA-2021-2303)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : libtomcrypt (EulerOS-SA-2021-2273)

According to the version of the libtomcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain invalid UTF-8...

EulerOS Virtualization 2.9.1 : libtomcrypt (EulerOS-SA-2021-2181)

According to the version of the libtomcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain invali...

Huawei EulerOS: Security Advisory for libtomcrypt (EulerOS-SA-2021-2196)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : libtomcrypt (EulerOS-SA-2021-2196)

According to the version of the libtomcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain invali...

Huawei EulerOS: Security Advisory for libtomcrypt (EulerOS-SA-2021-2181)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4868-1: LibTomCrypt vulnerability

It was discovered that LibTomCrypt incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or read sensitive information...

USN-4868-1 libtomcrypt vulnerability

It was discovered that LibTomCrypt incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or read sensitive information...

OESA-2021-1029 libtomcrypt security update

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines...

Updated libtomcrypt packages fix security vulnerability

Updated libtomcrypt packages fix security vulnerability: Improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data CVE-2019-17362...

MGASA-2020-0028 Updated libtomcrypt packages fix security vulnerability

Updated libtomcrypt packages fix security vulnerability: Improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data CVE-2019-17362...

openSUSE: Security Advisory for libtomcrypt (openSUSE-SU-2019:2514-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED12 Security Update : libtomcrypt (SUSE-SU-2019:3095-1)

This update for libtomcrypt fixes the following issues : CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data bsc1153433. Note that Tenable Network Security has extracted the preceding description...

SUSE-SU-2019:3095-1 Security update for libtomcrypt

This update for libtomcrypt fixes the following issues: - CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data bsc1153433...

CVE-2019-17362

In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service out-of-bounds read and crash or read information from other memory locations via...