Every CVE Search/ Get API key

CVE-2015-3622

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote...

4.3 MediumFix available

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Exploit likelihood

32.9%Up 29.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Record
CVE-2015-3622
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Record
CVE-2015-3622
Updated
2026-11-02
EUVDEUVD-2015-3664 No score

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Record
EUVD-2015-3664
Updated
2026-11-03
GitHub AdvisoriesGHSA-359p-x9w8-8g33 No score

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote...

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Record
GHSA-359p-x9w8-8g33
Weakness
CWE-119
Updated
2026-11-02
OSVRHSA-2017:1860 5.9

Red Hat Security Advisory: libtasn1 security, bug fix, and enhancement update

Record
RHSA-2017:1860
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV No score

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Record
CVE-2015-3622
Updated
2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2015-3622 No score

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Record
DEBIAN-CVE-2015-3622
Updated
2026-11-02
OSVMGASA-2015-0200 No score

Updated libtasn1 packages fix CVE-2015-3622

Updated libtasn1 packages fix security vulnerability:

A malformed certificate input could cause a heap overflow read in the DER decoding functions of Libtasn1. The heap overflow happens in the function _asn1_extract_der_octet() (CVE-2015-3622).

Record
MGASA-2015-0200
Updated
2026-11-02
OSVopenSUSE-SU-2024:10414-1 No score

libtasn1-4.9-1.3 on GA media

These are all security issues fixed in the libtasn1-4.9-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10414-1
Updated
2026-11-02
OSVSUSE-SU-2015:1518-1 No score

Security update for gnutls

gnutls was updated to fix several security vulnerabilities.

  • fix double free in certificate DN decoding (GNUTLS-SA-2015-3)(bsc#941794,CVE-2015-6251)
  • fix invalid read in octet string in bundled libtasn1 (bsc#929414,CVE-2015-3622)
  • fix ServerKeyExchange signature issue (GNUTLS-SA-2015-2)(bsc#929690)
Record
SUSE-SU-2015:1518-1
Updated
2026-11-02
OSVSUSE-SU-2016:1600-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser (bsc#961491)
  • CVE-2015-3622: Fixed invalid read in octet string decoding (bsc#929414)
  • CVE-2016-4008: Fixed infinite loop while parsing DER certificates (bsc#982779)
Record
SUSE-SU-2016:1600-1
Updated
2026-11-02
OSVSUSE-SU-2016:1601-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • Malformed asn1 definitions could have caused a segmentation fault in the asn1 definition parser (bsc#961491)
  • CVE-2015-3622: Fixed invalid read in octet string decoding (bsc#929414)
  • CVE-2016-4008: Fixed infinite loop while parsing DER certificates (bsc#982779)
Record
SUSE-SU-2016:1601-1
Updated
2026-11-02
OSVSUSE-SU-2017:2699-1 No score

Security update for SLES 12 Docker image

The SUSE Linux Enterprise Server 12 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

util-linux:

  • CVE-2015-5218
  • CVE-2016-5011
  • CVE-2017-2616

cracklib:

  • CVE-2016-6318

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • openldap2
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • shadow
  • zypper
Record
SUSE-SU-2017:2699-1
Updated
2026-11-02
OSVSUSE-SU-2017:2700-1 No score

Security update for SLES 12-SP1 Docker image

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

  • Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
  • Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

  • CVE-2015-3238

libtasn1:

  • CVE-2015-3622
  • CVE-2016-4008

expat:

expat:

  • CVE-2012-6702
  • CVE-2015-1283
  • CVE-2016-0718
  • CVE-2016-5300
  • CVE-2016-9063
  • CVE-2017-9233

libidn:

  • CVE-2015-2059
  • CVE-2015-8948
  • CVE-2016-6261
  • CVE-2016-6262
  • CVE-2016-6263

zlib:

  • CVE-2016-9840
  • CVE-2016-9841
  • CVE-2016-9842
  • CVE-2016-9843

curl:

  • CVE-2016-5419
  • CVE-2016-5420
  • CVE-2016-5421
  • CVE-2016-7141
  • CVE-2016-7167
  • CVE-2016-8615
  • CVE-2016-8616
  • CVE-2016-8617
  • CVE-2016-8618
  • CVE-2016-8619
  • CVE-2016-8620
  • CVE-2016-8621
  • CVE-2016-8622
  • CVE-2016-8623
  • CVE-2016-8624
  • CVE-2016-9586
  • CVE-2017-1000100
  • CVE-2017-1000101
  • CVE-2017-7407

openssl:

  • CVE-2016-2105
  • CVE-2016-2106
  • CVE-2016-2107
  • CVE-2016-2108
  • CVE-2016-2109
  • CVE-2016-2177
  • CVE-2016-2178
  • CVE-2016-2179
  • CVE-2016-2180
  • CVE-2016-2181
  • CVE-2016-2182
  • CVE-2016-2183
  • CVE-2016-6302
  • CVE-2016-6303
  • CVE-2016-6304
  • CVE-2016-6306
  • CVE-2016-7056
  • CVE-2016-8610
  • CVE-2017-3731

cracklib:

  • CVE-2016-6318

pcre:

  • CVE-2014-8964
  • CVE-2015-2325
  • CVE-2015-2327
  • CVE-2015-2328
  • CVE-2015-3210
  • CVE-2015-3217
  • CVE-2015-5073
  • CVE-2015-8380
  • CVE-2015-8381
  • CVE-2015-8382
  • CVE-2015-8383
  • CVE-2015-8384
  • CVE-2015-8385
  • CVE-2015-8386
  • CVE-2015-8387
  • CVE-2015-8388
  • CVE-2015-8389
  • CVE-2015-8390
  • CVE-2015-8391
  • CVE-2015-8392
  • CVE-2015-8393
  • CVE-2015-8394
  • CVE-2015-8395
  • CVE-2016-1283
  • CVE-2016-3191

appamor:

  • CVE-2017-6507

bash:

  • CVE-2014-6277
  • CVE-2014-6278
  • CVE-2016-0634
  • CVE-2016-7543

cpio:

  • CVE-2016-2037

glibc:

  • CVE-2016-1234
  • CVE-2016-3075
  • CVE-2016-3706
  • CVE-2016-4429
  • CVE-2017-1000366

perl:

  • CVE-2015-8853
  • CVE-2016-1238
  • CVE-2016-2381
  • CVE-2016-6185

libssh2_org:

  • CVE-2016-0787

util-linux:

  • CVE-2016-5011
  • CVE-2017-2616

ncurses:

  • CVE-2017-10684
  • CVE-2017-10685
  • CVE-2017-11112
  • CVE-2017-11113

libksba:

  • CVE-2016-4574
  • CVE-2016-4579

libxml2:

  • CVE-2014-0191
  • CVE-2015-8806
  • CVE-2016-1762
  • CVE-2016-1833
  • CVE-2016-1834
  • CVE-2016-1835
  • CVE-2016-1837
  • CVE-2016-1838
  • CVE-2016-1839
  • CVE-2016-1840
  • CVE-2016-2073
  • CVE-2016-3627
  • CVE-2016-3705
  • CVE-2016-4447
  • CVE-2016-4448
  • CVE-2016-4449
  • CVE-2016-4483
  • CVE-2016-4658
  • CVE-2016-9318
  • CVE-2016-9597
  • CVE-2017-9047
  • CVE-2017-9048
  • CVE-2017-9049
  • CVE-2017-9050

libgcrypt:

  • CVE-2015-7511
  • CVE-2016-6313
  • CVE-2017-7526

update-alternatives:

  • CVE-2015-0860

systemd:

  • CVE-2014-9770
  • CVE-2015-8842
  • CVE-2016-7796

dbus-1:

  • CVE-2014-7824
  • CVE-2015-0245

Finally, the following packages received non-security fixes:

  • augeas
  • bzip2
  • ca-certificates-mozilla
  • coreutils
  • cryptsetup
  • cyrus-sasl
  • dirmngr
  • e2fsprogs
  • findutils
  • gpg2
  • insserv-compat
  • kmod
  • libcap
  • libsolv
  • libzypp
  • lua51
  • lvm2
  • netcfg
  • p11-kit
  • permissions
  • procps
  • rpm
  • sed
  • sg3_utils
  • shadow
  • zypper
Record
SUSE-SU-2017:2700-1
Updated
2026-11-02
OSVUBUNTU-CVE-2015-3622 No score

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

Record
UBUNTU-CVE-2015-3622
Updated
2026-11-02
OSVUSN-2604-1 No score

libtasn1-3, libtasn1-6 vulnerability

Hanno Böck discovered that Libtasn1 incorrectly handled certain ASN.1 data. A remote attacker could possibly exploit this with specially crafted ASN.1 data and cause applications using Libtasn1 to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-2604-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libtasn1-6
Debian:12
 before 4.4-3
4.4-3
libtasn1-6
Debian:13
 before 4.4-3
4.4-3
libtasn1-6
Debian:14
 before 4.4-3
4.4-3
libtasn1-6
Debian:8
 before 4.2-3+deb8u1, plus listed versions
4.2-3
4.2-3+deb8u1
libtasn1
Mageia:4
 before 3.6-1.2.mga4
3.6-1.2.mga4
libtasn1-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
Show 28 moreShow less
Affected packages
PackageAffectedFixed
libtasn1-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
libtasn1-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:4.10-1.el7
0:4.10-1.el7
gnutls
SUSE:Linux Enterprise Desktop 12
From an advisory covering 2 CVEs
 before 3.2.15-11.1
3.2.15-11.1
gnutls
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 2 CVEs
 before 3.2.15-11.1
3.2.15-11.1
gnutls
SUSE:Linux Enterprise Server 12
From an advisory covering 2 CVEs
 before 3.2.15-11.1
3.2.15-11.1
gnutls
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 2 CVEs
 before 3.2.15-11.1
3.2.15-11.1
libtasn1
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 2 CVEs
 before 1.5-1.34.1
1.5-1.34.1
libtasn1
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 2 CVEs
 before 1.5-1.34.1
1.5-1.34.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 2 CVEs
 before 1.5-1.34.1
1.5-1.34.1
libtasn1
SUSE:Linux Enterprise Desktop 12
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1
SUSE:Linux Enterprise Desktop 12 SP1
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1
SUSE:Linux Enterprise Software Development Kit 12
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1
SUSE:Linux Enterprise Software Development Kit 12 SP1
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1
SUSE:Linux Enterprise Server 12
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1
SUSE:Linux Enterprise Server 12 SP1
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 2 CVEs
 before 3.7-11.1
3.7-11.1
libtasn1-6
Ubuntu:14.04:LTS
 before 3.4-3ubuntu0.3, plus listed versions
3.3-23.4-23.4-33.4-3ubuntu0.13.4-3ubuntu0.2
3.4-3ubuntu0.3
libtasn1
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 4.9-1.3
4.9-1.3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-3622 is a medium vulnerability (CVSS 4.3) in Gnu Libtasn1, published May 1, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 32.9%, the 98th percentile. Fixed in libtasn1-6 4.4-3.

References

Show 189 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open