Libtasn1 vulnerability

2012-05-0200:00:00

ubuntu.com

8.7 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.916 High

EPSS

Percentile

98.9%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04
Ubuntu 8.04

Packages

libtasn1-3 - Library to manage ASN.1 structures

Details

Matthew Hall discovered that Libtasn1 incorrectly handled certain large
values. An attacker could exploit this with a specially crafted ASN.1
structure and cause a denial of service, or possibly execute arbitrary
code.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchlibtasn1-3< 1.1-1ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibtasn1-3-bin< 1.1-1ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibtasn1-3-dbg< 1.1-1ubuntu0.1UNKNOWN
Ubuntu8.04noarchlibtasn1-3-dev< 1.1-1ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibtasn1-3< 2.10-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchlibtasn1-3-bin< 2.10-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchlibtasn1-3-dbg< 2.10-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchlibtasn1-3-dev< 2.10-1ubuntu1.1UNKNOWN
Ubuntu11.10noarchlibtasn1-3< 2.9-4ubuntu0.1UNKNOWN
Ubuntu11.10noarchlibtasn1-3-bin< 2.9-4ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	libtasn1-3	< 1.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libtasn1-3-bin	< 1.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libtasn1-3-dbg	< 1.1-1ubuntu0.1	UNKNOWN
Ubuntu	8.04	noarch	libtasn1-3-dev	< 1.1-1ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libtasn1-3	< 2.10-1ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	libtasn1-3-bin	< 2.10-1ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	libtasn1-3-dbg	< 2.10-1ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	libtasn1-3-dev	< 2.10-1ubuntu1.1	UNKNOWN
Ubuntu	11.10	noarch	libtasn1-3	< 2.9-4ubuntu0.1	UNKNOWN
Ubuntu	11.10	noarch	libtasn1-3-bin	< 2.9-4ubuntu0.1	UNKNOWN