Veracode Vulnerability DatabaseVERACODE:41418Buffer Overflow
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.9%
libasn1c.so is vulnerable to Stack-based buffer overflow. The vulnerability is due to vulnerable function genhash_get which results in segmentation fault (crashing of application) while processing ASN.1 module files and producing the C++ compatible C source code which can be used to serialize/deserialize the native C structures into BER/OER/PER/XER-based data files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libasn1c.so | le | 1.0.1 | |
| libasn1c.so | le | 1.0.1 |
References
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.9%