Beveiligingsadvies

CVE-2012-1569

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-03-26 19:00:00

Laatst bijgewerkt 2024-08-06 19:01:02

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.

← Alle CVE's bekijken Bekijk op cve.org ↗