Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21672
HistoryOct 10, 2019 - 3:50 a.m.

Denial Of Service (DoS)

2019-10-1003:50:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.018 Low

EPSS

Percentile

88.3%

libtomcrypt.so is vulnerable to denial of service (DoS). The attack is possible because it does not properly handle detection of invalid UTF-8 sequences in the function der_decode_utf8_string when an malicious DER-encoded data, causing memory leaks.

CPENameOperatorVersion
libtomcrypt.sole0.0.117