CVE-2015-3622
Fixed in a distro release EPSS 33%
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
Products: opensuse, fedoraproject fedora, gnu libtasn1
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libtasn1-6 | 4.4-3 |
| Debian 13 | libtasn1-6 | 4.4-3 |
| Debian 14 | libtasn1-6 | 4.4-3 |
| Debian 8 | libtasn1-6 | 4.2-3+deb8u1 |
| Red Hat Enterprise Linux 7 | libtasn1 | 0:4.10-1.el7 |
| Red Hat Enterprise Linux 7 | libtasn1-debuginfo | 0:4.10-1.el7 |
| Red Hat Enterprise Linux 7 | libtasn1-devel | 0:4.10-1.el7 |
| Red Hat Enterprise Linux 7 | libtasn1-tools | 0:4.10-1.el7 |
| SUSE Linux Enterprise Desktop 12 | gnutls | 3.2.15-11.1 |
| SUSE Linux Enterprise Desktop 12 | libtasn1 | 3.7-11.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | libtasn1 | 3.7-11.1 |
| SUSE Linux Enterprise Server 11 SP4 | libtasn1 | 1.5-1.34.1 |
| SUSE Linux Enterprise Server 12 | gnutls | 3.2.15-11.1 |
| SUSE Linux Enterprise Server 12 | libtasn1 | 3.7-11.1 |
| SUSE Linux Enterprise Server 12 SP1 | libtasn1 | 3.7-11.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libtasn1 | 1.5-1.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | gnutls | 3.2.15-11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | libtasn1 | 3.7-11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libtasn1 | 3.7-11.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libtasn1 | 1.5-1.34.1 |
| SUSE Linux Enterprise Software Development Kit 12 | gnutls | 3.2.15-11.1 |
| SUSE Linux Enterprise Software Development Kit 12 | libtasn1 | 3.7-11.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | libtasn1 | 3.7-11.1 |
| Ubuntu 14.04 LTS | libtasn1-6 | 3.4-3ubuntu0.3 |
| openSUSE Tumbleweed | libtasn1 | 4.9-1.3 |