CVE-2012-1569

EUVD-2012-1587
The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
gnugnutls
𝑥
≤ 3.0.15
gnugnutls
1.0.16
gnugnutls
1.0.17
gnugnutls
1.0.18
gnugnutls
1.0.19
gnugnutls
1.0.20
gnugnutls
1.0.21
gnugnutls
1.0.22
gnugnutls
1.0.23
gnugnutls
1.0.24
gnugnutls
1.0.25
gnugnutls
1.1.13
gnugnutls
1.1.14
gnugnutls
1.1.15
gnugnutls
1.1.16
gnugnutls
1.1.17
gnugnutls
1.1.18
gnugnutls
1.1.19
gnugnutls
1.1.20
gnugnutls
1.1.21
gnugnutls
1.1.22
gnugnutls
1.1.23
gnugnutls
1.2.0
gnugnutls
1.2.1
gnugnutls
1.2.2
gnugnutls
1.2.3
gnugnutls
1.2.4
gnugnutls
1.2.5
gnugnutls
1.2.6
gnugnutls
1.2.7
gnugnutls
1.2.8
gnugnutls
1.2.8.1a1:a1
gnugnutls
1.2.9
gnugnutls
1.2.10
gnugnutls
1.2.11
gnugnutls
1.3.0
gnugnutls
1.3.1
gnugnutls
1.3.2
gnugnutls
1.3.3
gnugnutls
1.3.4
gnugnutls
1.3.5
gnugnutls
1.4.0
gnugnutls
1.4.1
gnugnutls
1.4.2
gnugnutls
1.4.3
gnugnutls
1.4.4
gnugnutls
1.4.5
gnugnutls
1.5.0
gnugnutls
1.5.1
gnugnutls
1.5.2
gnugnutls
1.5.3
gnugnutls
1.5.4
gnugnutls
1.5.5
gnugnutls
1.6.0
gnugnutls
1.6.1
gnugnutls
1.6.2
gnugnutls
1.6.3
gnugnutls
1.7.0
gnugnutls
1.7.1
gnugnutls
1.7.2
gnugnutls
1.7.3
gnugnutls
1.7.4
gnugnutls
1.7.5
gnugnutls
1.7.6
gnugnutls
1.7.7
gnugnutls
1.7.8
gnugnutls
1.7.9
gnugnutls
1.7.10
gnugnutls
1.7.11
gnugnutls
1.7.12
gnugnutls
1.7.13
gnugnutls
1.7.14
gnugnutls
1.7.15
gnugnutls
1.7.16
gnugnutls
1.7.17
gnugnutls
1.7.18
gnugnutls
1.7.19
gnugnutls
2.0.0
gnugnutls
2.0.1
gnugnutls
2.0.2
gnugnutls
2.0.3
gnugnutls
2.0.4
gnugnutls
2.1.0
gnugnutls
2.1.1
gnugnutls
2.1.2
gnugnutls
2.1.3
gnugnutls
2.1.4
gnugnutls
2.1.5
gnugnutls
2.1.6
gnugnutls
2.1.7
gnugnutls
2.1.8
gnugnutls
2.2.0
gnugnutls
2.2.1
gnugnutls
2.2.2
gnugnutls
2.2.3
gnugnutls
2.2.4
gnugnutls
2.2.5
gnugnutls
2.3.0
gnugnutls
2.3.1
gnugnutls
2.3.2
gnugnutls
2.3.3
gnugnutls
2.3.4
gnugnutls
2.3.5
gnugnutls
2.3.6
gnugnutls
2.3.7
gnugnutls
2.3.8
gnugnutls
2.3.9
gnugnutls
2.3.10
gnugnutls
2.3.11
gnugnutls
2.4.0
gnugnutls
2.4.1
gnugnutls
2.4.2
gnugnutls
2.4.3
gnugnutls
2.5.0
gnugnutls
2.6.0
gnugnutls
2.6.1
gnugnutls
2.6.2
gnugnutls
2.6.3
gnugnutls
2.6.4
gnugnutls
2.6.5
gnugnutls
2.6.6
gnugnutls
2.7.4
gnugnutls
2.8.0
gnugnutls
2.8.1
gnugnutls
2.8.2
gnugnutls
2.8.3
gnugnutls
2.8.4
gnugnutls
2.8.5
gnugnutls
2.8.6
gnugnutls
2.10.0
gnugnutls
2.10.1
gnugnutls
2.10.2
gnugnutls
2.10.3
gnugnutls
2.10.4
gnugnutls
2.10.5
gnugnutls
2.12.0
gnugnutls
2.12.1
gnugnutls
2.12.2
gnugnutls
2.12.3
gnugnutls
2.12.4
gnugnutls
2.12.5
gnugnutls
2.12.6
gnugnutls
2.12.6.1
gnugnutls
2.12.7
gnugnutls
2.12.8
gnugnutls
2.12.9
gnugnutls
2.12.10
gnugnutls
2.12.11
gnugnutls
2.12.12
gnugnutls
2.12.13
gnugnutls
2.12.14
gnugnutls
3.0
gnugnutls
3.0.0
gnugnutls
3.0.1
gnugnutls
3.0.2
gnugnutls
3.0.3
gnugnutls
3.0.4
gnugnutls
3.0.5
gnugnutls
3.0.6
gnugnutls
3.0.7
gnugnutls
3.0.8
gnugnutls
3.0.9
gnugnutls
3.0.10
gnugnutls
3.0.11
gnugnutls
3.0.12
gnugnutls
3.0.13
gnugnutls
3.0.14
gnulibtasn1
𝑥
≤ 2.11
gnulibtasn1
0.1.0
gnulibtasn1
0.1.1
gnulibtasn1
0.1.2
gnulibtasn1
0.2.0
gnulibtasn1
0.2.1
gnulibtasn1
0.2.2
gnulibtasn1
0.2.3
gnulibtasn1
0.2.4
gnulibtasn1
0.2.5
gnulibtasn1
0.2.6
gnulibtasn1
0.2.7
gnulibtasn1
0.2.8
gnulibtasn1
0.2.9
gnulibtasn1
0.2.10
gnulibtasn1
0.2.11
gnulibtasn1
0.2.12
gnulibtasn1
0.2.13
gnulibtasn1
0.2.14
gnulibtasn1
0.2.15
gnulibtasn1
0.2.16
gnulibtasn1
0.2.17
gnulibtasn1
0.2.18
gnulibtasn1
0.3.0
gnulibtasn1
0.3.1
gnulibtasn1
0.3.2
gnulibtasn1
0.3.3
gnulibtasn1
0.3.4
gnulibtasn1
0.3.5
gnulibtasn1
0.3.6
gnulibtasn1
0.3.7
gnulibtasn1
0.3.8
gnulibtasn1
0.3.9
gnulibtasn1
0.3.10
gnulibtasn1
1.0
gnulibtasn1
1.1
gnulibtasn1
1.2
gnulibtasn1
1.3
gnulibtasn1
1.4
gnulibtasn1
1.5
gnulibtasn1
1.6
gnulibtasn1
1.7
gnulibtasn1
1.8
gnulibtasn1
2.0
gnulibtasn1
2.1
gnulibtasn1
2.2
gnulibtasn1
2.3
gnulibtasn1
2.4
gnulibtasn1
2.5
gnulibtasn1
2.6
gnulibtasn1
2.7
gnulibtasn1
2.8
gnulibtasn1
2.9
gnulibtasn1
2.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libtasn1-3
hardy
Fixed 1.1-1ubuntu0.1
released
lucid
Fixed 2.4-1ubuntu0.1
released
maverick
ignored
natty
Fixed 2.7-1ubuntu1.1
released
oneiric
Fixed 2.9-4ubuntu0.1
released
precise
Fixed 2.10-1ubuntu1.1
released
Common Weakness Enumeration
References