CVE-2006-0645

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash…

published February 10, 2006

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03892 · 90.1th percentile
Published
2006-02-10T18:00Z
EPSS history
Timeline
  • 10 FEB 18:00Z
    Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash…
    cvelistv5