[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

[3.6] libtasn1: asn1_find_node() based stackoverflow (CVE-2017-6891)

ID: oval:org.secpod.oval:def:1800550Date: (C)2018-03-28   (M)2023-12-20
Class: PATCHFamily: unix




Two errors in the "asn1_find_node" function within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

Platform:
Alpine Linux 3.6
Product:
libtasn1
Reference:
7328
CVE-2017-6891
CVE    1
CVE-2017-6891
CPE    2
cpe:/o:alpinelinux:alpine_linux:3.6
cpe:/a:gnu:libtasn1

© SecPod Technologies