[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2018-1000654 -- libtasn1-6

ID: oval:org.secpod.oval:def:2000585Date: (C)2019-04-21   (M)2023-11-13
Class: VULNERABILITYFamily: unix




GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id, after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

Platform:
Debian 8.x
Debian 9.x
Product:
libtasn1-6
Reference:
CVE-2018-1000654
CVE    1
CVE-2018-1000654
CPE    3
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
cpe:/a:gnu:libtasn1-6

© SecPod Technologies