Red Hat Security AdvisoryRHSA-2017:1860
libtasn1 security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libtasn1-4.10-1.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libtasn1-devel-4.10-1.el7, libtasn1-tools-4.10-1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) libtasn1-4.10-1.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libtasn1-devel-4.10-1.el7, libtasn1-tools-4.10-1.el7
- Red Hat Enterprise Linux Server (v. 7) libtasn1-4.10-1.el7, libtasn1-4.10-1.el7.ppc, libtasn1-devel-4.10-1.el7 +1
- Red Hat Enterprise Linux Server Optional (v. 7) libtasn1-tools-4.10-1.el7
- Red Hat Enterprise Linux Workstation (v. 7) libtasn1-4.10-1.el7, libtasn1-devel-4.10-1.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libtasn1-tools-4.10-1.el7
Fixes 2 records
Priority MEDIUM 53
Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07746 · Published 2015-04-10 · Partial fix CWE-119
Priority MEDIUM 45
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.32892 · Published 2015-05-12 · Partial fix CWE-119
