Red Hat Security AdvisoryRHSA-2012:0427
libtasn1 security update
Released 2012-03-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libtasn1-2.3-3.el6_2.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libtasn1-2.3-3.el6_2.1, libtasn1-devel-2.3-3.el6_2.1, libtasn1-tools-2.3-3.el6_2.1
- Red Hat Enterprise Linux HPC Node (v. 6) libtasn1-2.3-3.el6_2.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libtasn1-2.3-3.el6_2.1, libtasn1-devel-2.3-3.el6_2.1, libtasn1-tools-2.3-3.el6_2.1
- Red Hat Enterprise Linux Server (v. 6) libtasn1-2.3-3.el6_2.1, libtasn1-2.3-3.el6_2.1.ppc, libtasn1-devel-2.3-3.el6_2.1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) libtasn1-2.3-3.el6_2.1, libtasn1-tools-2.3-3.el6_2.1
- Red Hat Enterprise Linux Workstation (v. 6) libtasn1-2.3-3.el6_2.1, libtasn1-devel-2.3-3.el6_2.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libtasn1-2.3-3.el6_2.1, libtasn1-tools-2.3-3.el6_2.1
Fixes 1 record
Priority LOW 30
The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0441 · Published 2012-03-26 · Partial fix CWE-189
