CVE-2016-4008

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote…

published May 5, 2016

CVSS

—

EPSS

29%

Percentile

98.2

In the wild

Unconfirmed

What it is

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.29405 · 98.2th percentile
Published: 2016-05-05T18:00Z

EPSS history

Timeline

05 MAY 18:00Z
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote…
cvelistv5