PT-2013-1367 · Perl+6 · Convert::Asn1+6
Dana
·
Publicado
2013-10-09
·
Atualizado
2024-08-20
·
CVE-2013-7488
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
perl-Convert-ASN1 versions 0.27 and earlier
Description
The issue is related to the Convert::ASN1 module for Perl, which can lead to an infinite loop when encountering unexpected input. This can be exploited by a remote attacker to cause a denial of service.
Recommendations
For versions 0.27 and earlier, update to a version later than 0.27 to resolve the issue.
As a temporary workaround, consider restricting input to prevent unexpected data from being processed by the Convert::ASN1 module until a patch is available.
Exploit
Correção
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Almalinux
Astra Linux
Centos
Convert::Asn1
Red Hat
Rocky Linux
Suse