CVE-2012-1569 The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remot...
MediumCVSS 5.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnutls | <= 3.0.15 | No fix listed |
| gnutls | = 1.0.16 | No fix listed |
| gnutls | = 1.0.17 | No fix listed |
| gnutls | = 1.0.18 | No fix listed |
| gnutls | = 1.0.19 | No fix listed |
| gnutls | = 1.0.20 | No fix listed |
| gnutls | = 1.0.21 | No fix listed |
| gnutls | = 1.0.22 | No fix listed |
| gnutls | = 1.0.23 | No fix listed |
| gnutls | = 1.0.24 | No fix listed |
| gnutls | = 1.0.25 | No fix listed |
| gnutls | = 1.1.13 | No fix listed |
| gnutls | = 1.1.14 | No fix listed |
| gnutls | = 1.1.15 | No fix listed |
| gnutls | = 1.1.16 | No fix listed |
| gnutls | = 1.1.17 | No fix listed |
| gnutls | = 1.1.18 | No fix listed |
| gnutls | = 1.1.19 | No fix listed |
| gnutls | = 1.1.20 | No fix listed |
| gnutls | = 1.1.21 | No fix listed |
| gnutls | = 1.1.22 | No fix listed |
| gnutls | = 1.1.23 | No fix listed |
| gnutls | = 1.2.0 | No fix listed |
| gnutls | = 1.2.1 | No fix listed |
| gnutls | = 1.2.2 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| gnutls | = 1.2.3 | No fix listed |
| gnutls | = 1.2.4 | No fix listed |
| gnutls | = 1.2.5 | No fix listed |
| gnutls | = 1.2.6 | No fix listed |
| gnutls | = 1.2.7 | No fix listed |
| gnutls | = 1.2.8 | No fix listed |
| gnutls | = 1.2.8.1a1 | No fix listed |
| gnutls | = 1.2.9 | No fix listed |
| gnutls | = 1.2.10 | No fix listed |
| gnutls | = 1.2.11 | No fix listed |
| gnutls | = 1.3.0 | No fix listed |
| gnutls | = 1.3.1 | No fix listed |
| gnutls | = 1.3.2 | No fix listed |
| gnutls | = 1.3.3 | No fix listed |
| gnutls | = 1.3.4 | No fix listed |
| gnutls | = 1.3.5 | No fix listed |
| gnutls | = 1.4.0 | No fix listed |
| gnutls | = 1.4.1 | No fix listed |
| gnutls | = 1.4.2 | No fix listed |
| gnutls | = 1.4.3 | No fix listed |
| gnutls | = 1.4.4 | No fix listed |
| gnutls | = 1.4.5 | No fix listed |
| gnutls | = 1.5.0 | No fix listed |
| gnutls | = 1.5.1 | No fix listed |
| gnutls | = 1.5.2 | No fix listed |
| gnutls | = 1.5.3 | No fix listed |
| gnutls | = 1.5.4 | No fix listed |
| gnutls | = 1.5.5 | No fix listed |
| gnutls | = 1.6.0 | No fix listed |
| gnutls | = 1.6.1 | No fix listed |
| gnutls | = 1.6.2 | No fix listed |
| gnutls | = 1.6.3 | No fix listed |
| gnutls | = 1.7.0 | No fix listed |
| gnutls | = 1.7.1 | No fix listed |
| gnutls | = 1.7.2 | No fix listed |
| gnutls | = 1.7.3 | No fix listed |
| gnutls | = 1.7.4 | No fix listed |
| gnutls | = 1.7.5 | No fix listed |
| gnutls | = 1.7.6 | No fix listed |
| gnutls | = 1.7.7 | No fix listed |
| gnutls | = 1.7.8 | No fix listed |
| gnutls | = 1.7.9 | No fix listed |
| gnutls | = 1.7.10 | No fix listed |
| gnutls | = 1.7.11 | No fix listed |
| gnutls | = 1.7.12 | No fix listed |
| gnutls | = 1.7.13 | No fix listed |
| gnutls | = 1.7.14 | No fix listed |
| gnutls | = 1.7.15 | No fix listed |
| gnutls | = 1.7.16 | No fix listed |
| gnutls | = 1.7.17 | No fix listed |
| gnutls | = 1.7.18 | No fix listed |
| gnutls | = 1.7.19 | No fix listed |
| gnutls | = 2.0.0 | No fix listed |
| gnutls | = 2.0.1 | No fix listed |
| gnutls | = 2.0.2 | No fix listed |
| gnutls | = 2.0.3 | No fix listed |
| gnutls | = 2.0.4 | No fix listed |
| gnutls | = 2.1.0 | No fix listed |
| gnutls | = 2.1.1 | No fix listed |
| gnutls | = 2.1.2 | No fix listed |
| gnutls | = 2.1.3 | No fix listed |
| gnutls | = 2.1.4 | No fix listed |
| gnutls | = 2.1.5 | No fix listed |
| gnutls | = 2.1.6 | No fix listed |
| gnutls | = 2.1.7 | No fix listed |
| gnutls | = 2.1.8 | No fix listed |
| gnutls | = 2.2.0 | No fix listed |
| gnutls | = 2.2.1 | No fix listed |
| gnutls | = 2.2.2 | No fix listed |
| gnutls | = 2.2.3 | No fix listed |
| gnutls | = 2.2.4 | No fix listed |
| gnutls | = 2.2.5 | No fix listed |
| gnutls | = 2.3.0 | No fix listed |
| gnutls | = 2.3.1 | No fix listed |
| gnutls | = 2.3.2 | No fix listed |
| gnutls | = 2.3.3 | No fix listed |
| gnutls | = 2.3.4 | No fix listed |
| gnutls | = 2.3.5 | No fix listed |
| gnutls | = 2.3.6 | No fix listed |
| gnutls | = 2.3.7 | No fix listed |
| gnutls | = 2.3.8 | No fix listed |
| gnutls | = 2.3.9 | No fix listed |
| gnutls | = 2.3.10 | No fix listed |
| gnutls | = 2.3.11 | No fix listed |
| gnutls | = 2.4.0 | No fix listed |
| gnutls | = 2.4.1 | No fix listed |
| gnutls | = 2.4.2 | No fix listed |
| gnutls | = 2.4.3 | No fix listed |
| gnutls | = 2.5.0 | No fix listed |
| gnutls | = 2.6.0 | No fix listed |
| gnutls | = 2.6.1 | No fix listed |
| gnutls | = 2.6.2 | No fix listed |
| gnutls | = 2.6.3 | No fix listed |
| gnutls | = 2.6.4 | No fix listed |
| gnutls | = 2.6.5 | No fix listed |
| gnutls | = 2.6.6 | No fix listed |
| gnutls | = 2.7.4 | No fix listed |
| gnutls | = 2.8.0 | No fix listed |
| gnutls | = 2.8.1 | No fix listed |
| gnutls | = 2.8.2 | No fix listed |
| gnutls | = 2.8.3 | No fix listed |
| gnutls | = 2.8.4 | No fix listed |
| gnutls | = 2.8.5 | No fix listed |
| gnutls | = 2.8.6 | No fix listed |
| gnutls | = 2.10.0 | No fix listed |
| gnutls | = 2.10.1 | No fix listed |
| gnutls | = 2.10.2 | No fix listed |
| gnutls | = 2.10.3 | No fix listed |
| gnutls | = 2.10.4 | No fix listed |
| gnutls | = 2.10.5 | No fix listed |
| gnutls | = 2.12.0 | No fix listed |
| gnutls | = 2.12.1 | No fix listed |
| gnutls | = 2.12.2 | No fix listed |
| gnutls | = 2.12.3 | No fix listed |
| gnutls | = 2.12.4 | No fix listed |
| gnutls | = 2.12.5 | No fix listed |
| gnutls | = 2.12.6 | No fix listed |
| gnutls | = 2.12.6.1 | No fix listed |
| gnutls | = 2.12.7 | No fix listed |
| gnutls | = 2.12.8 | No fix listed |
| gnutls | = 2.12.9 | No fix listed |
| gnutls | = 2.12.10 | No fix listed |
| gnutls | = 2.12.11 | No fix listed |
| gnutls | = 2.12.12 | No fix listed |
| gnutls | = 2.12.13 | No fix listed |
| gnutls | = 2.12.14 | No fix listed |
| gnutls | = 3.0 | No fix listed |
| gnutls | = 3.0.0 | No fix listed |
| gnutls | = 3.0.1 | No fix listed |
| gnutls | = 3.0.2 | No fix listed |
| gnutls | = 3.0.3 | No fix listed |
| gnutls | = 3.0.4 | No fix listed |
| gnutls | = 3.0.5 | No fix listed |
| gnutls | = 3.0.6 | No fix listed |
| gnutls | = 3.0.7 | No fix listed |
| gnutls | = 3.0.8 | No fix listed |
| gnutls | = 3.0.9 | No fix listed |
| gnutls | = 3.0.10 | No fix listed |
| gnutls | = 3.0.11 | No fix listed |
| gnutls | = 3.0.12 | No fix listed |
| gnutls | = 3.0.13 | No fix listed |
| gnutls | = 3.0.14 | No fix listed |
| GNU libtasn1 | <= 2.11 | No fix listed |
| GNU libtasn1 | = 0.1.0 | No fix listed |
| GNU libtasn1 | = 0.1.1 | No fix listed |
| GNU libtasn1 | = 0.1.2 | No fix listed |
| GNU libtasn1 | = 0.2.0 | No fix listed |
| GNU libtasn1 | = 0.2.1 | No fix listed |
| GNU libtasn1 | = 0.2.2 | No fix listed |
| GNU libtasn1 | = 0.2.3 | No fix listed |
| GNU libtasn1 | = 0.2.4 | No fix listed |
| GNU libtasn1 | = 0.2.5 | No fix listed |
| GNU libtasn1 | = 0.2.6 | No fix listed |
| GNU libtasn1 | = 0.2.7 | No fix listed |
| GNU libtasn1 | = 0.2.8 | No fix listed |
| GNU libtasn1 | = 0.2.9 | No fix listed |
| GNU libtasn1 | = 0.2.10 | No fix listed |
| GNU libtasn1 | = 0.2.11 | No fix listed |
| GNU libtasn1 | = 0.2.12 | No fix listed |
| GNU libtasn1 | = 0.2.13 | No fix listed |
| GNU libtasn1 | = 0.2.14 | No fix listed |
| GNU libtasn1 | = 0.2.15 | No fix listed |
| GNU libtasn1 | = 0.2.16 | No fix listed |
| GNU libtasn1 | = 0.2.17 | No fix listed |
| GNU libtasn1 | = 0.2.18 | No fix listed |
| GNU libtasn1 | = 0.3.0 | No fix listed |
| GNU libtasn1 | = 0.3.1 | No fix listed |
| GNU libtasn1 | = 0.3.2 | No fix listed |
| GNU libtasn1 | = 0.3.3 | No fix listed |
| GNU libtasn1 | = 0.3.4 | No fix listed |
| GNU libtasn1 | = 0.3.5 | No fix listed |
| GNU libtasn1 | = 0.3.6 | No fix listed |
| GNU libtasn1 | = 0.3.7 | No fix listed |
| GNU libtasn1 | = 0.3.8 | No fix listed |
| GNU libtasn1 | = 0.3.9 | No fix listed |
References
- 20120320 Mu Dynamics, Inc. Security Advisories MU-201202-01 and MU-201202-02 for GnuTLS and Libtasn1 mailing-list
- [gnutls-devel] 20120316 gnutls 3.0.16 mailing-list patch
- [help-libtasn1] 20120319 GNU Libtasn1 2.12 released mailing-list
- [help-libtasn1] 20120319 minimal fix to security issue mailing-list
- blog.mudynamics.com exploit
- linux.oracle.com
- FEDORA-2012-4308 vendor-advisory
- FEDORA-2012-4342 vendor-advisory
- FEDORA-2012-4451 vendor-advisory
- FEDORA-2012-4357 vendor-advisory
- FEDORA-2012-4417 vendor-advisory
- FEDORA-2012-4409 vendor-advisory
- SUSE-SU-2014:0320 vendor-advisory
- RHSA-2012:0427 vendor-advisory
- RHSA-2012:0488 vendor-advisory
- RHSA-2012:0531 vendor-advisory
- 48397 third-party-advisory
- 48488 third-party-advisory
- 48505 third-party-advisory
- 48578 third-party-advisory
- 48596 third-party-advisory
- 49002 third-party-advisory
- 50739 third-party-advisory
- 57260 third-party-advisory
- DSA-2440 vendor-advisory
- www.gnu.org vendor-advisory
- MDVSA-2012:039 vendor-advisory
- [oss-security] 20120320 CVE request: libtasn1 "asn1_get_length_der()" DER decoding issue mailing-list
- [oss-security] 20120320 Re: CVE request: libtasn1 "asn1_get_length_der()" DER decoding issue mailing-list
- [oss-security] 20120321 Re: CVE request: GnuTLS TLS record handling issue / MU-201202-01 mailing-list
- 1026829 vdb-entry
- USN-1436-1 vendor-advisory
- bugzilla.redhat.com