CVE-2015-2806
HighSummary
A stack-based buffer overflow in asn1_der_decoding in libtasn1 before version 4.4 allows remote attackers to have unspecified impact.
Risk Assessment
Attackers may exploit this vulnerability to gain control over the system or inject malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to update the libtasn1 library to version 4.4 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in libtasn1
See all- CVE-2024-12243Medium
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption.
- CVE-2024-12133Medium
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
Original NVD description (English source)
Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.