Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-3468
HistoryJun 05, 2014 - 12:00 a.m.

CVE-2014-3468

2014-06-0500:00:00
ubuntu.com
ubuntu.com
12

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.5%

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly
report an error when a negative bit length is identified, which allows
context-dependent attackers to cause out-of-bounds access via crafted ASN.1
data.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlibtasn1-3< 2.4-1ubuntu0.2UNKNOWN
ubuntu12.04noarchlibtasn1-3< 2.10-1ubuntu1.2UNKNOWN
ubuntu14.04noarchlibtasn1-6< 3.4-3ubuntu0.1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.5%