Every CVE Search/ Get API key

CVE-2006-0645

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x...

7.5 HighFix available

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

Exploit likelihood

3.89%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

Record
CVE-2006-0645
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

Record
CVE-2006-0645
Updated
2026-11-02
EUVDEUVD-2006-0652 No score

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

Record
EUVD-2006-0652
Updated
2026-11-03
GitHub AdvisoriesGHSA-2w9r-mr74-qj9p No score

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x...

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

Record
GHSA-2w9r-mr74-qj9p
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libtasn1-2
Debian:3.1
 before 0.2.10-3sarge1, plus listed versions
0.2.10-3
0.2.10-3sarge1
gnutls11
Debian:3.1
 before 1.0.16-13.2, plus listed versions
1.0.16-13.11.0.16-13.1sarge1
1.0.16-13.2
gnutls
Red Hat:enterprise_linux:4::as
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls-devel
Red Hat:enterprise_linux:4::as
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls-devel
Red Hat:enterprise_linux:4::desktop
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls
Red Hat:enterprise_linux:4::es
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
Show 4 moreShow less
Affected packages
PackageAffectedFixed
gnutls-devel
Red Hat:enterprise_linux:4::es
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls
Red Hat:enterprise_linux:4::ws
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2
gnutls-devel
Red Hat:enterprise_linux:4::ws
 before 0:1.0.20-3.2.2
0:1.0.20-3.2.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-0645 is a high vulnerability (CVSS 7.5) in Free Software Foundation Inc. Libtasn1, published February 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.89%, the 90th percentile. Fixed in libtasn1-2 0.2.10-3sarge1.

References

Show 33 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open