CVE-2019-8981

概要

参考情報

• axtls.sourceforge.net · Product
• telekom.com/en/corporate-responsibility/data-protection-data-security/security/details/advisories-504842 · Patch
• telekom.com/resource/blob/566546/276aaa2eab781729f2544d62edecf002/dl-190322-remote-buffer-overflow-in-a-axtls-data.pdf · Exploit

axtls のその他の脆弱性

• CVE-2023-33613中 5.5axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability al…
• CVE-2019-9689高 7.5process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake mes…
• CVE-2019-10013高 7.5The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cau…
• CVE-2018-16253中 5.9In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metad…
• CVE-2018-16150中 5.9In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the ha…