USN-2294-1

Dashboard / Vulnerabilities / USN-2294-1

USN-2294-1

Summary: libtasn1-3, libtasn1-6 vulnerabilities

Details: It was discovered that Libtasn1 incorrectly handled certain ASN.1 data structures. An attacker could exploit this with specially crafted ASN.1 data and cause applications using Libtasn1 to crash, resulting in a denial of service. (CVE-2014-3467) It was discovered that Libtasn1 incorrectly handled negative bit lengths. An attacker could exploit this with specially crafted ASN.1 data and cause applications using Libtasn1 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-3468) It was discovered that Libtasn1 incorrectly handled certain ASN.1 data. An attacker could exploit this with specially crafted ASN.1 data and cause applications using Libtasn1 to crash, resulting in a denial of service. (CVE-2014-3469)

References: https://ubuntu.com/security/notices/USN-2294-1, https://ubuntu.com/security/CVE-2014-3467, https://ubuntu.com/security/CVE-2014-3468, https://ubuntu.com/security/CVE-2014-3469