CVE-2017-6891

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow…

published May 22, 2017

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05585 · 92.8th percentile
Published
2017-05-22T19:00Z
EPSS history
Timeline
  • 22 MAY 19:00Z
    Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow…
    cvelistv5