CVEvulnerability
CVE-2015-2806
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-04-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
Affected configurations
• canonical ubuntu linux 10.04
• canonical ubuntu linux 12.04
• canonical ubuntu linux 14.04
• canonical ubuntu linux 14.10
• debian debian linux 7.0
• fedoraproject fedora 20
• fedoraproject fedora 21
• fedoraproject fedora 22
• gnu libtasn1 (<= 4.3)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=4d4f992826a4962790ecd0cce6fbba4a415ce149 git.savannah.gnu.org
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154741.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154805.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155117.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155270.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155435.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155483.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3220 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:193 Broken Link
- http://www.openwall.com/lists/oss-security/2015/03/29/4 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/03/31/2 Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securityfocus.com/bid/73436 www.securityfocus.com
- http://www.securitytracker.com/id/1032080 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2559-1 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1860 access.redhat.com
- https://security.gentoo.org/glsa/201509-04 security.gentoo.org
- http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=4d4f992826a4962790ecd0cce6fbba4a415ce149 git.savannah.gnu.org
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154741.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154805.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155117.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155270.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155435.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155483.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3220 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:193 Broken Link
- http://www.openwall.com/lists/oss-security/2015/03/29/4 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/03/31/2 Mailing List, Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html www.oracle.com
- http://www.securityfocus.com/bid/73436 www.securityfocus.com
- http://www.securitytracker.com/id/1032080 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-2559-1 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:1860 access.redhat.com
- https://security.gentoo.org/glsa/201509-04 security.gentoo.org