VDB
GCVE-110-MAGEIA-2017-10
GCVE-110-MAGEIA-2017-10
Advisory Published
When Crypto++ library parses an ASN.1 data value, the library allocates
for the content octets based on the length octets. Later, if there's too
few or too little content octets, the library throws a BERDecodeErr
exception. The memory for the content octets will be zeroized (even if
unused), which could take a long time on a large allocation
(CVE-2016-9939).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | libcryptopp | 5.6.3-1.3.mga5 (unaffected), 0 (affected), 0 (affected), 5.6.3-1.3.mga5 (unaffected) | — |
| Mageia | python-paramiko | 0 (affected), 1.15.2-1.1.mga5 (unaffected) | — |
Aliases
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.