Debian/libtasn1-6: unknown
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds acc
Action: Upgrade libtasn1-6 to 3.6-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6-1 | - |
Fixed versions
| 3.6-1 |
Sources
- osv: DEBIAN-CVE-2014-3468#Debian:13/libtasn1-6
- https://security-tracker.debian.org/tracker/CVE-2014-3468
published · modified · JSON