CVE-2018-1000654

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00009.html
• lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html
• securityfocus.com/bid/105151 · Third Party Advisory
• gitlab.com/gnutls/libtasn1/issues/4 · Exploit
• lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E

libtasn1 のその他の脆弱性

• CVE-2025-13151高 7.5Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overfl…
• CVE-2021-46848緊急 9.1GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
• CVE-2018-6003高 7.5An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER de…
• CVE-2017-10790高 7.5The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that…
• CVE-2017-6891高 8.8Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-bas…