CVE-2014-3467
Fixed in a distro release EPSS 7%
Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.
Products: gnutls, gnu libtasn1, redhat virtualization, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, suse linux_enterprise_desktop, suse linux_enterprise_high_availability_extension, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, f5 arx_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libtasn1-6 | 3.6-1 |
| Debian 13 | libtasn1-6 | 3.6-1 |
| Debian 14 | libtasn1-6 | 3.6-1 |
| Debian 6.0 | libtasn1-3 | 2.7-1+squeeze+2 |
| Debian 7 | libtasn1-3 | 2.13-2+deb7u1 |
| Red Hat Enterprise Linux 5 | gnutls | 0:1.4.1-16.el5_10 |
| Red Hat Enterprise Linux 5 | gnutls-debuginfo | 0:1.4.1-16.el5_10 |
| Red Hat Enterprise Linux 5 | gnutls-devel | 0:1.4.1-16.el5_10 |
| Red Hat Enterprise Linux 5 | gnutls-utils | 0:1.4.1-16.el5_10 |
| Red Hat Enterprise Linux 6 | libtasn1 | 0:2.3-6.el6_5 |
| Red Hat Enterprise Linux 6 | libtasn1-debuginfo | 0:2.3-6.el6_5 |
| Red Hat Enterprise Linux 6 | libtasn1-devel | 0:2.3-6.el6_5 |
| Red Hat Enterprise Linux 6 | libtasn1-tools | 0:2.3-6.el6_5 |
| Red Hat Enterprise Linux 6 | rhev-hypervisor6 | 0:6.5-20140624.0.el6ev |
| Red Hat Enterprise Linux 7 | libtasn1 | 0:3.3-5.el7_0 |
| Red Hat Enterprise Linux 7 | libtasn1-debuginfo | 0:3.3-5.el7_0 |
| Red Hat Enterprise Linux 7 | libtasn1-devel | 0:3.3-5.el7_0 |
| Red Hat Enterprise Linux 7 | libtasn1-tools | 0:3.3-5.el7_0 |
| Ubuntu 14.04 LTS | libtasn1-6 | 3.4-3ubuntu0.1 |
| openSUSE Tumbleweed | libtasn1 | 4.9-1.3 |