{"id":"CVE-2019-17362","aliases":["ALPINE-CVE-2019-17362","AZL-36958","AZL-7275","DEBIAN-CVE-2019-17362","DLA-1951-1","EUVD-2019-7770","GHSA-x32c-6j92-4hp9","MGASA-2020-0028","OESA-2021-1029","SUSE-SU-2019:2808-1","SUSE-SU-2019:3095-1","UBUNTU-CVE-2019-17362","USN-4868-1","openSUSE-SU-2019:2454-1","openSUSE-SU-2019:2514-1"],"status":"published","title":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c)...","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03108,"percentile":0.87879,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2019-10-09T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"perl-cryptx","fixed_in":["0.079-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"perl-cryptx","fixed_in":["0.079-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"perl-cryptx","fixed_in":["0.079-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"perl-cryptx","fixed_in":["0.079-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"perl-cryptx","fixed_in":["0.079-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"perl-cryptx","fixed_in":["0.079-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"perl-cryptx","fixed_in":["0.079-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libtomcrypt","fixed_in":["1.18.2-9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libtomcrypt","fixed_in":["1.18.2-9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libtomcrypt","fixed_in":["1.18.2-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libtomcrypt","fixed_in":["1.18.2-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libtomcrypt","fixed_in":["1.18.2-3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"libtomcrypt","fixed_in":["1.17-6+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"libtomcrypt","fixed_in":["1.18.2-2.1.mga7"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS","package":"libtomcrypt","fixed_in":["1.18.2-4.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libtomcrypt","fixed_in":["1.18.2-4.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libtomcrypt","fixed_in":["1.17-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"libtomcrypt","fixed_in":["1.17-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libtomcrypt","fixed_in":["1.17-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtomcrypt","fixed_in":["1.17-5ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtomcrypt","fixed_in":["1.17-7ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtomcrypt","fixed_in":["1.18.1-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"libtomcrypt","fixed_in":["1.17-lp150.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"libtomcrypt","fixed_in":["1.17-lp151.3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"perl-cryptx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.079-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"perl-cryptx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.079-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"perl-cryptx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.079-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"perl-cryptx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.079-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"perl-cryptx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.079-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"perl-cryptx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.079-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"perl-cryptx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.079-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-3"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-6+deb8u1"}]}],"versions":["1.17-6"]},{"source":"osv","ecosystem":"Mageia:7","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-2.1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-4.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.2-4.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-5ubuntu0.1+esm1"}]}],"versions":["1.17-3.2ubuntu1","1.17-5","1.17-5ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-7ubuntu0.1+esm1"}]}],"versions":["1.17-7","1.17-7ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu0.1+esm1"}]}],"versions":["1.17-9","1.18.0-1","1.18.1-1","1.18.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-5ubuntu0.1+esm1"}]}],"versions":["1.17-3.2ubuntu1","1.17-5","1.17-5ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-7ubuntu0.1+esm1"}]}],"versions":["1.17-7","1.17-7ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.1-1ubuntu0.1+esm1"}]}],"versions":["1.17-9","1.18.0-1","1.18.1-1","1.18.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-lp150.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libtomcrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-lp151.3.3.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"libtom","product":"libtomcrypt"}],"references":[{"url":"https://vuldb.com/?id.142995","tags":["x_transferred","Permissions Required","report"]},{"url":"https://github.com/libtom/libtomcrypt/issues/507","tags":["x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://github.com/libtom/libtomcrypt/pull/508","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00010.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00020.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00041.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YU5OMCY3PX54YVI4FMNDEENHDJZJ3RJW/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47YP5SXQ4RY6KMTK2HI5ZZR244XKRMCZ/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/47YP5SXQ4RY6KMTK2HI5ZZR244XKRMCZ/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YU5OMCY3PX54YVI4FMNDEENHDJZJ3RJW/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-17362","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-x32c-6j92-4hp9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-17362","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-17362","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0028.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25808","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-11/msg00093.html","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1029","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192808-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153433","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17362","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193095-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-17362","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4868-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-17362","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GKJSBZBZEYMM65TFRPRHDO2WY4SXZUYR/#GKJSBZBZEYMM65TFRPRHDO2WY4SXZUYR","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/USH7GU5DGPQAOBLAFTS57RIDHTD7ZYI6/#USH7GU5DGPQAOBLAFTS57RIDHTD7ZYI6","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-17362","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T00:00:00Z","modified":"2024-11-15T15:03:01.466Z","updated_at":"2026-11-02T14:20:24.678649Z"}],"euvd":[{"id":"EUVD-2019-7770","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T00:00:00Z","modified":"2024-11-15T15:03:01Z","updated_at":"2026-11-03T00:04:59.953537Z"}],"ghsa":[{"id":"GHSA-x32c-6j92-4hp9","title":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c)...","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2022-05-24T16:58:18Z","modified":"2023-12-14T03:30:53Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:55:11.957073Z"}],"nvd":[{"id":"CVE-2019-17362","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T01:15:10.13Z","modified":"2026-06-17T02:23:48.73Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:31.019577Z"}],"osv":[{"id":"ALPINE-CVE-2019-17362","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T01:15:10.13Z","modified":"2026-11-03T06:31:37.306183543Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"AZL-36958","title":"CVE-2019-17362 affecting package libtomcrypt for versions less than 1.18.2-9","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T01:15:10Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"AZL-7275","title":"CVE-2019-17362 affecting package libtomcrypt for versions less than 1.18.2-9","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T01:15:10Z","modified":"2026-04-21T04:33:42.186462Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"CVE-2019-17362","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T01:15:10.13Z","modified":"2026-10-20T10:50:49.349973777Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-17362","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T01:15:10.13Z","modified":"2026-09-21T07:02:29.326672373Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"OESA-2021-1029","title":"libtomcrypt security update","description":"LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines. \\r\\n\\r\\n\r\nSecurity Fix(es):\\r\\n\\r\\n\r\nIn LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.(CVE-2019-17362)\\r\\n\\r\\n","status":"published","published":"2021-02-05T11:04:15Z","modified":"2026-08-18T01:15:06.085673746Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2019-17362","description":"In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read information from other memory locations via carefully crafted DER-encoded data.","status":"published","published":"2019-10-09T01:15:00Z","modified":"2026-04-22T12:13:49.191984Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"DLA-1951-1","title":"libtomcrypt - security update","status":"published","published":"2019-10-09T00:00:00Z","modified":"2026-03-09T01:21:59.20315Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2020-0028","title":"Updated libtomcrypt packages fix security vulnerability","description":"Updated libtomcrypt packages fix security vulnerability:\n\nImproper detection of invalid UTF-8 sequences that could have led to DoS\nor information disclosure via crafted DER-encoded data (CVE-2019-17362).\n","status":"published","published":"2020-01-11T23:52:04Z","modified":"2026-04-16T04:41:57.141986024Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2454-1","title":"Security update for libtomcrypt","description":"This update for libtomcrypt fixes the following issue:\n\nCVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-09T12:46:03Z","modified":"2026-02-04T04:18:36.912198Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2514-1","title":"Security update for libtomcrypt","description":"This update for libtomcrypt fixes the following issue:\n\nCVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-15T05:20:55Z","modified":"2026-02-04T03:56:52.861027Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2019:2808-1","title":"Security update for libtomcrypt","description":"This update for libtomcrypt fixes the following issue:\n\nCVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433).\n","status":"published","published":"2019-10-29T13:41:41Z","modified":"2026-02-04T02:14:46.379134Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3095-1","title":"Security update for libtomcrypt","description":"This update for libtomcrypt fixes the following issues:\n\n- CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433).\n","status":"published","published":"2019-11-28T15:48:14Z","modified":"2025-05-02T04:09:02.542055Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4868-1","title":"libtomcrypt vulnerability","description":"It was discovered that LibTomCrypt incorrectly handled certain inputs. An\nattacker could possibly use this issue to cause a denial of service or read\nsensitive information.\n","status":"published","published":"2021-03-15T22:56:32Z","modified":"2026-06-29T13:48:06.01942172Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}