VDB
CVE-2006-0645
CVE-2006-0645
PUBLISHED
CVSS 7.5 HIGH
Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.
EPSS 3.89% · 90.2th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
3.89%
90.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| free_software_foundation_inc. | libtasn1 | 0.1.0, 0.1.2, 0.2.0 |
| n/a | n/a | * |
Timeline
- Feb 10, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- 1015612 vdb
- 18918 third-party-advisory
- MDKSA-2006:039 vendor-advisory
- RHSA-2006:0207 vendor-advisory
- DSA-986 vendor-advisory
- GLSA-200602-08 vendor-advisory
- [gnutls-dev] 20060209 GnuTLS 1.3.4 - Experimental - Security release mailing-list
- 16568 vdb
- 19080 third-party-advisory
- http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch url
- [gnutls-dev] 20060209 GnuTLS 1.2.10 - Security release mailing-list
- http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup url
- http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup url
- USN-251-1 vendor-advisory
- 18898 third-party-advisory
- http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html technical
- http://secunia.com/advisories/18815 technical
- http://secunia.com/advisories/18830 technical
- http://secunia.com/advisories/18832 technical
- http://secunia.com/advisories/19092 technical
…and 13 more