CVE-2016-4008
05.05.2016, 18:59
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 15.10 |
| canonical | ubuntu_linux | 16.04 |
| opensuse | opensuse | 13.2 |
| gnu | libtasn1 | 𝑥 ≤ 4.7 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libtasn1 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libtasn1-6 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libtasn1-6-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libtasn1-devel |
|
Common Weakness Enumeration
References