{"id":"CVE-2017-6891","aliases":["ALPINE-CVE-2017-6891","DEBIAN-CVE-2017-6891","DLA-950-1","DSA-3861-1","EUVD-2017-15945","GHSA-ch46-3x6h-7qrw","MGASA-2017-0159","SUSE-SU-2017:1886-1","SUSE-SU-2019:1379-1","SUSE-SU-2022:3797-1","UBUNTU-CVE-2017-6891","USN-3309-1"],"status":"published","title":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4...","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05585,"percentile":0.92942,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-787"],"published":"2017-05-22T00:00:00Z","modified":"2026-10-24T10:30:30Z","fixes":[{"ecosystem":"Alpine:v3.3","package":"libtasn1","fixed_in":["4.7-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"libtasn1","fixed_in":["4.8-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libtasn1","fixed_in":["4.9-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libtasn1","fixed_in":["4.10-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libtasn1-6","fixed_in":["4.10-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libtasn1-6","fixed_in":["4.10-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libtasn1-6","fixed_in":["4.10-1.1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libtasn1-3","fixed_in":["2.13-2+deb7u4"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libtasn1-6","fixed_in":["4.2-3+deb8u3"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"libtasn1","fixed_in":["4.2-4.2.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libtasn1-6","fixed_in":["3.4-3ubuntu0.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libtasn1-6","fixed_in":["4.7-3ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libtasn1-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-2+deb7u4"}]}],"versions":["2.13-2","2.13-2+deb7u1","2.13-2+deb7u2","2.13-2+deb7u3"]},{"source":"osv","ecosystem":"Debian:8","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-3+deb8u3"}]}],"versions":["4.2-3","4.2-3+deb8u1","4.2-3+deb8u2"]},{"source":"osv","ecosystem":"Mageia:5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-4.2.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-24.39.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 11 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-24.39.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-24.39.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-24.39.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7-13.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3ubuntu0.5"}]}],"versions":["3.3-2","3.4-2","3.4-3","3.4-3ubuntu0.1","3.4-3ubuntu0.2","3.4-3ubuntu0.3","3.4-3ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.2"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3ubuntu0.5"}]}],"versions":["3.3-2","3.4-2","3.4-3","3.4-3ubuntu0.1","3.4-3ubuntu0.2","3.4-3ubuntu0.3","3.4-3ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.2"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1"]}],"products":[{"vendor":"apache","product":"bookkeeper"},{"vendor":"debian","product":"debian_linux"},{"vendor":"flexera software llc","product":"gnutls libtasn1"},{"vendor":"gnu","product":"libtasn1"}],"references":[{"url":"https://security.gentoo.org/glsa/201710-11","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3861","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://secuniaresearch.flexerasoftware.com/advisories/76125/","tags":["x_refsource_MISC","x_transferred","Permissions Required","report"]},{"url":"https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=5520704d075802df25ce4ffccc010ba1641bd484","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/98641","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1038619","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","web"]},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6891"},{"url":"https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E"},{"url":"http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commit;h=5520704d075802df25ce4ffccc010ba1641bd484"},{"url":"https://secuniaresearch.flexerasoftware.com/advisories/76125"},{"url":"https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11"},{"url":"https://github.com/advisories/GHSA-ch46-3x6h-7qrw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-6891","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-6891","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0159.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20931","tags":["report"]},{"url":"https://www.debian.org/security/2017/dsa-3861","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171886-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1034173","tags":["report"]},{"url":"https://bugzilla.suse.com/1038337","tags":["report"]},{"url":"https://bugzilla.suse.com/1040621","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7869","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191379-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1105435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000654","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223797-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204690","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46848","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-6891","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3309-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3309-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-6891","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2017-05-22T19:00:00Z","modified":"2024-08-05T15:41:17.677Z","updated_at":"2026-11-02T14:33:16.916541Z"}],"euvd":[{"id":"EUVD-2017-15945","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2017-05-22T19:00:00Z","modified":"2024-08-05T15:41:17Z","updated_at":"2026-11-03T02:39:10.49179Z"}],"ghsa":[{"id":"GHSA-ch46-3x6h-7qrw","title":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4...","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2022-05-13T01:09:01Z","modified":"2025-04-20T03:39:06Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T15:01:46.859213Z"}],"nvd":[{"id":"CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2017-05-22T19:29:00.25Z","modified":"2026-06-17T01:23:17.003Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:03:49.449157Z"}],"osv":[{"id":"ALPINE-CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2017-05-22T19:29:00.25Z","modified":"2026-06-15T18:24:51.961210569Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2017-05-22T19:29:00.25Z","modified":"2026-10-24T10:30:30.787687098Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"DEBIAN-CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2017-05-22T19:29:00.25Z","modified":"2026-09-01T20:03:49.524268836Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.412243Z"},{"id":"UBUNTU-CVE-2017-6891","description":"Two errors in the \"asn1_find_node()\" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.","status":"published","published":"2017-05-22T00:00:00Z","modified":"2026-04-22T11:30:33.031712Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"DLA-950-1","title":"libtasn1-3 - security update","status":"published","published":"2017-05-23T00:00:00Z","modified":"2026-03-09T02:09:22.084005Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"DSA-3861-1","title":"libtasn1-6 - security update","status":"published","published":"2017-05-24T00:00:00Z","modified":"2026-03-09T01:23:31.727157Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0159","title":"Updated libtasn1 packages fix security vulnerability","description":"Jakub Jirasek of Secunia Research discovered that libtasn1 did not\nproperly validate its input. This would allow an attacker to cause a\ncrash by denial-of-service, or potentially execute arbitrary code, by\ntricking a user into processing a maliciously crafted assignments file\n(CVE-2017-6891).\n","status":"published","published":"2017-06-08T21:39:47Z","modified":"2026-04-16T06:24:58.118700442Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2017:1886-1","title":"Security update for gnutls","description":"This update for gnutls fixes the following issues:\n\n- GNUTLS-SA-2017-3 / CVE-2017-7869: An out-of-bounds write in OpenPGP certificate decoding was fixed (bsc#1034173)\n- CVE-2017-6891: A potential stack buffer overflow in the bundled libtasn1 was fixed (bsc#1040621)\n- An address read of 4 bytes past the end of buffer in OpenPGP certificate parsing was fixed (bsc#1038337)\n","status":"published","published":"2017-07-15T07:50:59Z","modified":"2026-02-04T02:31:04.310375Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2019:1379-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000654: Fixed a denial of service in the asn1 parser (bsc#1105435).\n- CVE-2017-6891: Fixed a stack overflow in asn1_find_node() (bsc#1040621).\n","status":"published","published":"2019-05-29T13:07:20Z","modified":"2026-02-04T03:43:19.83941Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2022:3797-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-1000654: Fixed a denial of service in the asn1 parser (bsc#1105435).\n- CVE-2017-6891: Added safety check to fix a stack overflow issue (bsc#1040621).\n- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)\n","status":"published","published":"2022-10-27T12:34:13Z","modified":"2026-02-04T03:17:02.578255Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-3309-1","title":"libtasn1-6 vulnerability","description":"Jakub Jirasek discovered that GnuTLS incorrectly handled certain\nassignments files. If a user were tricked into processing a specially\ncrafted assignments file, a remote attacker could possibly execute arbirary\ncode.\n","status":"published","published":"2017-06-05T16:35:33Z","modified":"2026-04-22T09:35:43.61577Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}