NetSight
IP …
medium5.0

CVE-2014-3469

The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL…

Impact

The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.

Affected products

VendorProductAffected versions
GnuGnutls
before 3.5.7
GnuLibtasn1
before 3.6
RedhatVirtualization
Version 6.0
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux Desktop
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 6.5, 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.5, 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 6.5, 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Versions 5.0, 6.0, 7.0
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise High Availability Extension
Version 11

Weakness classification

CWE-476

References