CVE-2012-1569

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle…

published March 26, 2012

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04410 · 91.2th percentile
Published
2012-03-26T19:00Z
EPSS history
Timeline
  • 26 MAR 19:00Z
    The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle…
    cvelistv5