[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Libtasn1 - (bulletinoct2019)

ID: oval:org.secpod.oval:def:2105349Date: (C)2020-01-19   (M)2023-11-13
Class: PATCHFamily: unix




GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

Platform:
Sun Solaris 11
Product:
service/network/ftp
security/kerberos-5
security/kerberos-5/kdc
library/libtasn1
Reference:
bulletinoct2019
CVE-2018-1000654
CVE    1
CVE-2018-1000654
CPE    1
cpe:/o:oracle:solaris:11

© SecPod Technologies