Alpine/libtasn1: high 7.5
The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node str
Action: Upgrade libtasn1 to 4.7-r3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.7-r3 | - |
Fixed versions
| 4.7-r3 |
Sources
- osv: ALPINE-CVE-2017-10790#Alpine:v3.3/libtasn1
- https://security.alpinelinux.org/vuln/CVE-2017-10790
published · modified · JSON