LI
Product
Libtasn1
13
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add Libtasn1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46848 | 9.1 | Oct 24 | GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der Affected: before 4.19.0 |
| CVE-2017-6891 | 8.8 | May 22 | Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user… Affected: 4.10 |
| CVE-2025-13151 | 7.5 | Jan 7 | Stack-based buffer overflow in libtasn1 version: v4.20.0 Affected: 4.20.0 |
| CVE-2018-6003 | 7.5 | Jan 22 | An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13 Affected: through 4.12 |
| CVE-2017-10790 | 7.5 | Jul 2 | The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value… Affected: through 4.12 |
| CVE-2016-4008 | 5.9 | May 5 | The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a… Affected: through 4.7 |
| CVE-2018-1000654 | 5.5 | Aug 20 | GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue… Affected: 4.12; 4.13 |
| CVE-2015-3622 | – | May 12 | The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted… Affected: through 4.4 |
| CVE-2015-2806 | – | Apr 10 | Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors Affected: through 4.3 |
| CVE-2014-3469 | – | Jun 5 | The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference… Affected: before 3.6 |
| CVE-2014-3468 | – | Jun 5 | The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to… Affected: before 3.6 |
| CVE-2014-3467 | – | Jun 5 | Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via… Affected: before 3.6 |
| CVE-2012-1569 | – | Mar 26 | The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length… Affected: through 2.11; 0.1.0; 0.1.1; 0.1.2; 0.2.0; 0.2.1; +34 more |
Showing 13