CVE-2016-4008MEDIUM
Description
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.
References
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182299.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182907.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183221.html
http://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html
http://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html
http://www.debian.org/security/2016/dsa-3568
http://www.openwall.com/lists/oss-security/2016/04/11/3
http://www.ubuntu.com/usn/USN-2957-1
http://www.ubuntu.com/usn/USN-2957-2
https://lists.gnu.org/archive/html/help-libtasn1/2016-04/msg00009.html
Details
Source: MITRE
Published: 2016-05-05
Updated: 2018-10-30
Type: CWE-399
Risk Information
CVSS v2.0
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3.0
Base Score: 5.9
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 2.2
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Configuration 2
OR
Configuration 3
OR
cpe:2.3:a:gnu:libtasn1:*:*:*:*:*:*:*:* versions up to 4.7 (inclusive)
Configuration 4
OR
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 121655 | Photon OS 1.0: Libtasn1 PHSA-2016-0013 | Nessus | PhotonOS Local Security Checks | high |
| 111847 | Photon OS 1.0: Dhcp / Libtasn1 / Subversion / Unzip PHSA-2016-0013 (deprecated) | Nessus | PhotonOS Local Security Checks | high |
| 99012 | GLSA-201703-05 : GNU Libtasn1: Denial of Service | Nessus | Gentoo Local Security Checks | medium |
| 93152 | SUSE SLED12 / SLES12 Security Update : libtasn1 (SUSE-SU-2016:1601-1) | Nessus | SuSE Local Security Checks | medium |
| 93151 | SUSE SLES11 Security Update : libtasn1 (SUSE-SU-2016:1600-1) | Nessus | SuSE Local Security Checks | medium |
| 91868 | openSUSE Security Update : libtasn1 (openSUSE-2016-773) | Nessus | SuSE Local Security Checks | medium |
| 91619 | openSUSE Security Update : libtasn1 (openSUSE-2016-716) | Nessus | SuSE Local Security Checks | medium |
| 91362 | Debian DLA-495-1 : libtasn1-3 security update | Nessus | Debian Local Security Checks | medium |
| 90927 | Debian DSA-3568-1 : libtasn1-6 - security update | Nessus | Debian Local Security Checks | medium |
| 90857 | Ubuntu 16.04 LTS : libtasn1-6 vulnerability (USN-2957-2) | Nessus | Ubuntu Local Security Checks | medium |
| 90856 | Ubuntu 12.04 LTS / 14.04 LTS / 15.10 : libtasn1-3, libtasn1-6 vulnerability (USN-2957-1) | Nessus | Ubuntu Local Security Checks | medium |
| 90770 | Fedora 22 : libtasn1-4.8-1.fc22 (2016-96bfd9e873) | Nessus | Fedora Local Security Checks | medium |
| 90645 | Fedora 23 : libtasn1-4.8-1.fc23 (2016-383b8250e6) | Nessus | Fedora Local Security Checks | medium |
| 90640 | Fedora 24 : libtasn1-4.8-1.fc24 (2016-048ffb6235) | Nessus | Fedora Local Security Checks | medium |
| 90605 | FreeBSD : libtasn1 -- denial of service parsing malicious DER certificates (1b0d2938-0766-11e6-94fa-002590263bf5) | Nessus | FreeBSD Local Security Checks | medium |