CVE-2015-2806
Fixed in a distro release EPSS 8%
Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
Products: canonical ubuntu_linux, debian_linux, fedoraproject fedora, gnu libtasn1
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libtasn1-6 | 4.2-3 |
| Debian 13 | libtasn1-6 | 4.2-3 |
| Debian 14 | libtasn1-6 | 4.2-3 |
| Debian 6.0 | libtasn1-3 | 2.7-1+squeeze+3 |
| Debian 7 | libtasn1-3 | 2.13-2+deb7u2 |
| Red Hat Enterprise Linux 7 | libtasn1 | 0:4.10-1.el7 |
| Red Hat Enterprise Linux 7 | libtasn1-debuginfo | 0:4.10-1.el7 |
| Red Hat Enterprise Linux 7 | libtasn1-devel | 0:4.10-1.el7 |
| Red Hat Enterprise Linux 7 | libtasn1-tools | 0:4.10-1.el7 |
| SUSE Linux Enterprise Desktop 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Desktop 12 | libtasn1 | 3.7-4.1 |
| SUSE Linux Enterprise High Availability Extension 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise High Availability Extension 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server 12 | libtasn1 | 3.7-4.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libtasn1 | 3.7-4.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | gnutls | 2.4.1-24.39.60.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libtasn1 | 3.7-4.1 |
| Ubuntu 14.04 LTS | libtasn1-6 | 3.4-3ubuntu0.2 |
| openSUSE Tumbleweed | libtasn1 | 4.9-1.3 |