{"id":"CVE-2017-10790","aliases":["ALPINE-CVE-2017-10790","BELL-CVE-2017-10790","DEBIAN-CVE-2017-10790","DLA-1038-1","DLA-2255-1","DSA-4106-1","EUVD-2017-2435","GHSA-xcv8-6xfc-9686","MGASA-2018-0121","SUSE-SU-2018:2825-1","SUSE-SU-2018:2825-2","SUSE-SU-2018:2842-1","SUSE-SU-2018:2930-1","SUSE-SU-2019:14058-1","UBUNTU-CVE-2017-10790","USN-3547-1"],"status":"published","title":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer...","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04896,"percentile":0.92139,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2017-07-01T00:00:00Z","modified":"2026-10-24T10:30:53Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"libtasn1","fixed_in":["4.7-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"libtasn1","fixed_in":["4.8-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libtasn1","fixed_in":["4.9-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libtasn1","fixed_in":["4.10-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libtasn1","fixed_in":["4.12-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libtasn1-6","fixed_in":["4.12-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libtasn1-6","fixed_in":["4.12-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libtasn1-6","fixed_in":["4.12-2.1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libtasn1-3","fixed_in":["2.13-2+deb7u5"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libtasn1-6","fixed_in":["4.2-3+deb8u4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libtasn1-6","fixed_in":["3.4-3ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libtasn1-6","fixed_in":["4.7-3ubuntu0.16.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-2.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libtasn1-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-2+deb7u5"}]}],"versions":["2.13-2","2.13-2+deb7u1","2.13-2+deb7u2","2.13-2+deb7u3","2.13-2+deb7u4"]},{"source":"osv","ecosystem":"Debian:8","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-3+deb8u4"}]}],"versions":["4.2-3","4.2-3+deb8u1","4.2-3+deb8u2","4.2-3+deb8u3"]},{"source":"osv","ecosystem":"Debian:9","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.1+deb9u1"}]}],"versions":["4.10-1.1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.15-18.6.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.27-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-6.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 11 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-24.39.76.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3ubuntu0.6"}]}],"versions":["3.3-2","3.4-2","3.4-3","3.4-3ubuntu0.1","3.4-3ubuntu0.2","3.4-3ubuntu0.3","3.4-3ubuntu0.4","3.4-3ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.3"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1","4.7-3ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3ubuntu0.6"}]}],"versions":["3.3-2","3.4-2","3.4-3","3.4-3ubuntu0.1","3.4-3ubuntu0.2","3.4-3ubuntu0.3","3.4-3ubuntu0.4","3.4-3ubuntu0.5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.3"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1","4.7-3ubuntu0.16.04.2"],"bundled":2}],"products":[{"vendor":"gnu","product":"libtasn1"}],"references":[{"url":"https://security.gentoo.org/glsa/201710-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://usn.ubuntu.com/3547-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1464141","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","VDB Entry","report"]},{"url":"https://www.debian.org/security/2018/dsa-4106","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00026.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-10790"},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://usn.ubuntu.com/3547-1"},{"url":"https://github.com/advisories/GHSA-xcv8-6xfc-9686"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-10790","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-10790","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-10790","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0121.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22462","tags":["report"]},{"url":"https://usn.ubuntu.com/usn/usn-3547-1/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182825-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047002","tags":["report"]},{"url":"https://bugzilla.suse.com/1105437","tags":["report"]},{"url":"https://bugzilla.suse.com/1105459","tags":["report"]},{"url":"https://bugzilla.suse.com/1105460","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10846","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182825-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182842-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182930-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914058-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-10790","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3547-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-10790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-6003","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-10790","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2017-07-02T03:00:00Z","modified":"2024-08-05T17:50:11.68Z","updated_at":"2026-11-02T14:33:13.27226Z"}],"euvd":[{"id":"EUVD-2017-2435","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2017-07-02T03:00:00Z","modified":"2024-08-05T17:50:11Z","updated_at":"2026-11-03T02:23:25.703104Z"}],"ghsa":[{"id":"GHSA-xcv8-6xfc-9686","title":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer...","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2022-05-13T01:09:02Z","modified":"2025-04-20T03:40:47Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:01:48.455381Z"}],"nvd":[{"id":"CVE-2017-10790","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2017-07-02T03:29:00.183Z","modified":"2026-06-17T01:00:42.71Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:03:51.893212Z"}],"osv":[{"id":"ALPINE-CVE-2017-10790","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2017-07-02T03:29:00.183Z","modified":"2026-06-15T18:18:06.724594425Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-10790","title":"CVE-2017-10790 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:58.919079Z","modified":"2026-01-26T09:46:42.012694Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-10790","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2017-07-02T03:29:00.183Z","modified":"2026-10-24T10:30:53.699819139Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-10790","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2017-07-02T03:29:00.183Z","modified":"2026-09-01T20:03:40.905116847Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"UBUNTU-CVE-2017-10790","description":"The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.","status":"published","published":"2017-07-01T00:00:00Z","modified":"2026-04-22T11:09:54.565448Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1038-1","title":"libtasn1-3 - security update","status":"published","published":"2017-07-24T00:00:00Z","modified":"2026-03-09T01:01:24.098933Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-2255-1","title":"libtasn1-6 - security update","status":"published","published":"2020-06-28T00:00:00Z","modified":"2026-03-09T01:17:50.737593Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4106-1","title":"libtasn1-6 - security update","status":"published","published":"2018-02-07T00:00:00Z","modified":"2026-03-09T01:20:43.309194Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2018-0121","title":"Updated libtasn1 packages fix security vulnerability","description":"It was discovered that Libtasn1 incorrectly handled certain files. If a\nuser were tricked into opening a crafted file, an attacker could possibly\nuse this to cause a denial of service (CVE-2017-10790).\n\nIt was discovered that Libtasn1 incorrectly handled certain inputs. An\nattacker could possibly use this to cause Libtasn1 to hang, resulting in a\ndenial of service (CVE-2018-6003).\n","status":"published","published":"2018-02-08T11:30:47Z","modified":"2026-04-16T06:24:30.469027672Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2018:2825-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nThis update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- Improved mitigations against Lucky 13 class of attacks\n- 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)\n- HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459)\n- HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437)\n- The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)\n","status":"published","published":"2018-09-24T08:10:59Z","modified":"2026-02-04T04:30:10.307659Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2825-2","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nThis update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- Improved mitigations against Lucky 13 class of attacks\n- 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)\n- HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459)\n- HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437)\n- The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)\n","status":"published","published":"2018-10-18T12:50:50Z","modified":"2026-02-04T02:49:43.142633Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2842-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- Improved mitigations against Lucky 13 class of attacks\n  - 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)\n  - HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant (CVE-2018-10845, bsc#1105459)\n  - HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls (CVE-2018-10844, bsc#1105437)\n- The _asn1_check_identifier function in Libtasn1 caused a NULL pointer dereference and crash (CVE-2017-10790, bsc#1047002)\n","status":"published","published":"2018-09-24T10:55:04Z","modified":"2026-02-04T02:15:14.878471Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2930-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following security issues:\n\n- Improved mitigations against Lucky 13 class of attacks\n- CVE-2018-10846: 'Just in Time' PRIME + PROBE cache-based side channel attack\n  can lead to plaintext recovery (bsc#1105460)\n- CVE-2018-10845: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use\n  of wrong constant (bsc#1105459)\n- CVE-2018-10844: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not\n  enough dummy function calls (bsc#1105437)\n- CVE-2017-10790: The _asn1_check_identifier function in Libtasn1 caused a NULL\n  pointer dereference and crash (bsc#1047002)\n","status":"published","published":"2018-09-28T06:02:06Z","modified":"2025-05-02T04:06:05.678039Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2019:14058-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10846: Improve mitigations against Lucky 13 class of attacks (PRIME + PROBE) (bsc#1105460).\n- CVE-2017-10790: Fixed a denial of service in the _asn1_check_identifier() function (bsc#1047002).\n","status":"published","published":"2019-05-21T16:15:00Z","modified":"2026-02-04T03:01:10.783709Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"USN-3547-1","title":"libtasn1-6 vulnerabilities","description":"It was discovered that Libtasn1 incorrectly handled certain files.\nIf a user were tricked into opening a crafted file, an attacker could possibly\nuse this to cause a denial of service. This issue only affected Ubuntu 14.04\nLTS and Ubuntu 16.04 LTS. (CVE-2017-10790)\n\nIt was discovered that Libtasn1 incorrectly handled certain inputs.\nAn attacker could possibly use this to cause Libtasn1 to hang, resulting\nin a denial of service. This issue only affected Ubuntu 16.04 LTS and\nUbuntu 17.10. (CVE-2018-6003)\n","status":"published","published":"2018-01-25T19:23:50Z","modified":"2026-04-22T09:43:19.388912Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}