Debian/libtasn1-6: high 8.8
Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a spec
Action: Upgrade libtasn1-6 to 4.10-1.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10-1.1 | - |
Fixed versions
| 4.10-1.1 |
Sources
- osv: DEBIAN-CVE-2017-6891#Debian:14/libtasn1-6
- https://security-tracker.debian.org/tracker/CVE-2017-6891
published · modified · JSON