[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

[3.4] libtasn1: asn1_find_node() based stack overflow (CVE-2017-6891)

ID: oval:org.secpod.oval:def:1800568Date: (C)2018-03-28   (M)2023-12-20
Class: PATCHFamily: unix




Two errors in the "asn1_find_node" function within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

Platform:
Alpine Linux 3.4
Product:
libtasn1
Reference:
7330
CVE-2017-6891
CVE    1
CVE-2017-6891
CPE    2
cpe:/a:gnu:libtasn1
cpe:/o:alpinelinux:alpine_linux:3.4

© SecPod Technologies