NetSight
IP …
medium5.0

CVE-2014-3467

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out…

Impact

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.

Affected products

VendorProductAffected versions
GnuGnutls
before 3.5.7
GnuLibtasn1
before 3.6
RedhatVirtualization
Version 6.0
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 6.5, 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.5, 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 6.5, 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise High Availability Extension
Version 11

References