PT-2017-17399 · Gnu+3 · Libtasn1+4
CVE-2017-6891
·
Publicado
2017-05-22
·
Atualizado
2023-02-03
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GnuTLS libtasn1 version 4.10
Description
The issue is related to two errors in the
asn1 find node() function within the libtasn1 library of GnuTLS. These errors can be exploited to cause a stack-based buffer overflow. This can happen when a user is tricked into processing a specially crafted assignments file, for example, via the asn1Coding utility.Recommendations
For GnuTLS libtasn1 version 4.10, consider restricting the use of the
asn1 find node() function until a patch is available. As a temporary workaround, avoid processing specially crafted assignments files with the asn1Coding utility to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gnutls
Suse
Ubuntu
Libtasn1