All errata/sisyphus/ALT-PU-2016-1318-1
ALT-PU-2016-1318-1

Package update libtasn1 in branch sisyphus

Version4.8-alt1
Task#162898
Published2016-04-11
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2016-4008
MEDIUM5.9

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.

Published: 2016-05-05Modified: 2025-04-12
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xMEDIUM 5.9
CVSS:3.x/CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
References