Debian/libtasn1-6: high 7.5
An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.
Action: Upgrade libtasn1-6 to 4.13-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.13-2 | - |
Fixed versions
| 4.13-2 |
Sources
- osv: DEBIAN-CVE-2018-6003#Debian:14/libtasn1-6
- https://security-tracker.debian.org/tracker/CVE-2018-6003
published · modified · JSON