Detections
Analytics
Mandriva Linux Security Advisory : libtasn1 (MDVSA-2014:107)
medium Nessus Plugin ID 74416
Language:
Synopsis
The remote Mandriva Linux host is missing one or more security updates.Description
Updated libtasn1 packages fix security vulnerabilities :Multiple buffer boundary check issues were discovered in libtasn1 library, causing it to read beyond the boundary of an allocated buffer. An untrusted ASN.1 input could cause an application using the library to crash (CVE-2014-3467).
It was discovered that libtasn1 library function asn1_get_bit_der() could incorrectly report negative bit length of the value read from ASN.1 input. This could possibly lead to an out of bounds access in an application using libtasn1, for example in case if application tried to terminate read value with NUL byte (CVE-2014-3468).
A NULL pointer dereference flaw was found in libtasn1's asn1_read_value_type() / asn1_read_value() function. If an application called the function with a NULL value for an ivalue argument to determine the amount of memory needed to store data to be read from the ASN.1 input, libtasn1 could incorrectly attempt to dereference the NULL pointer, causing an application using the library to crash (CVE-2014-3469).
The packages for mes5 have been patched to correct these issues and the packages for mbs1 have been upgraded to the 3.6 version where these issues has been fixed.
Solution
Update the affected lib64tasn1-devel, lib64tasn1_6 and / or libtasn1-tools packages.See Also
Plugin Details
Severity: Medium
ID: 74416
File Name: mandriva_MDVSA-2014-107.nasl
Version: 1.4
Type: local
Family: Mandriva Local Security Checks
Published: 6/10/2014
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:lib64tasn1-devel, p-cpe:/a:mandriva:linux:lib64tasn1_6, p-cpe:/a:mandriva:linux:libtasn1-tools, cpe:/o:mandriva:business_server:1
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 6/9/2014
Reference Information
CVE: CVE-2014-3467, CVE-2014-3468, CVE-2014-3469
MDVSA: 2014:107