CVE-2014-3468

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows…

published June 5, 2014

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03789 · 89.9th percentile
Published
2014-06-05T20:00Z
EPSS history
Timeline
  • 05 JUN 20:00Z
    The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows…
    cvelistv5