VDB
CVE-2006-0645
CVE-2006-0645
PUBLISHED
CVSS 7.5 HIGH
Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.
EPSS 3.72% · 88.2th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
3.72%
88.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| free_software_foundation_inc. | libtasn1 | 0.1.0, 0.1.2, 0.2.0 |
| n/a | n/a | * |
Timeline
- Feb 10, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- 2006-0008 vendor-advisory
- 18815 third-party-advisory
- 446 third-party-advisory
- FEDORA-2006-107 vendor-advisory
- 19092 third-party-advisory
- 1015612 vdb
- 23054 vdb
- 18794 third-party-advisory
- 18918 third-party-advisory
- MDKSA-2006:039 vendor-advisory
- 18830 third-party-advisory
- oval:org.mitre.oval:def:10540 vdb
- [gnutls-dev] 20060209 GnuTLS 1.2.10 - Security release mailing-list
- RHSA-2006:0207 vendor-advisory
- [gnutls-dev] 20060209 Libtasn1 0.2.18 - Tiny ASN.1 Library - Security release mailing-list
- DSA-986 vendor-advisory
- DSA-985 vendor-advisory
- ADV-2006-0496 vdb
- http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup url
- GLSA-200602-08 vendor-advisory
…and 13 more