CVE-2015-2806

Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

Updated libtasn1 packages fix security vulnerability:

The libtasn1 library before version 4.4 is vulnerable to a two-byte stack overflow in asn1_der_decoding (CVE-2015-2806).

These are all security issues fixed in the libtasn1-4.9-1.3 package on the GA media of openSUSE Tumbleweed.

libtasn1 has been updated to fix three security issues:

* asn1_get_bit_der() could have returned negative bit length
  (CVE-2014-3468)
* Multiple boundary check issues could have allowed DoS (CVE-2014-3467)
* Possible DoS by NULL pointer dereference in asn1_read_value_type
  (CVE-2014-3469)

Security Issues:

* CVE-2014-3468
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3468>
* CVE-2014-3467
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3467>
* CVE-2014-3469
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3469>

The ASN.1 parsing library libtasn1 was updated to fix one memory handling issue.

The following vulnerability was fixed:

• CVE-2015-2806: A stack-based buffer overflow in libtasn1 allowed remote attackers to have unspecified impact via unknown vectors.

This update for gnutls fixes the following security issues:

• CVE-2015-8313: First byte of the padding in CBC mode is not checked (bsc#957568)
• CVE-2015-2806: Two-byte stack overflow in asn1_der_decoding (bsc#924828)

Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

Hanno Böck discovered that Libtasn1 incorrectly handled certain ASN.1 data. A remote attacker could possibly exploit this with specially crafted ASN.1 data and cause applications using Libtasn1 to crash, resulting in a denial of service, or possibly execute arbitrary code.