NVD

Id
31657  
Name
CVE-2014-3468  
Description
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-05  
Modified Date
2017-01-06  
Seq
2014-3468  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
165776 31657 CVE-2014-3468 http://advisories.mageia.org/MGASA-2014-0247.html  View
165777 31657 CVE-2014-3468 http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=1c3ccb3e040bf13e342ee60bc23b21b97b11923f  View
165778 31657 CVE-2014-3468 http://linux.oracle.com/errata/ELSA-2014-0594.html  View
165779 31657 CVE-2014-3468 http://linux.oracle.com/errata/ELSA-2014-0596.html  View
165780 31657 CVE-2014-3468 [help-libtasn1] 20140525 GNU Libtasn1 3.6 released  View
165781 31657 CVE-2014-3468 RHSA-2014:0594  View
165782 31657 CVE-2014-3468 RHSA-2014:0596  View
165783 31657 CVE-2014-3468 RHSA-2014:0815  View
165784 31657 CVE-2014-3468 59408  View
165785 31657 CVE-2014-3468 60320  View
165786 31657 CVE-2014-3468 http://support.f5.com/kb/en-us/solutions/public/15000/400/sol15423.html  View
165787 31657 CVE-2014-3468 DSA-3056  View
165788 31657 CVE-2014-3468 MDVSA-2015:116  View
165789 31657 CVE-2014-3468 http://www.novell.com/support/kb/doc.php?id=7015302  View
165790 31657 CVE-2014-3468 http://www.novell.com/support/kb/doc.php?id=7015303  View
165791 31657 CVE-2014-3468 https://bugzilla.redhat.com/show_bug.cgi?id=1102323  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13896 JVNDB-2014-002771 GNU Libtasn1 の asn1_get_bit_der 関数における領域外にアクセスされる脆弱性 GNU Libtasn1 の asn1_get_bit_der 関数は、負のビット長がが識別される場合、適切にエラーをレポートしないため、領域外にアクセスされる脆弱性が存在します。 CVE-2014-3468 70756 CVE-2014-3468 31657 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002771.html 2014-05-25 2015-06-09 View