CVE-2017-12966

EUVD-2017-4487
The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to cause a denial of service (segmentation fault) via a crafted .asn1 file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
asn1c_projectasn1c
0.9.28
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
asn1c
bookworm
unimportant
bullseye
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
asn1c
trusty
dne
xenial
not-affected
zesty
not-affected
Common Weakness Enumeration
References
https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ
https://drive.google.com/open?id=0B9DojFnTUSNGd05zSHI1RmpKQjQ