Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libtasn1: stack overflow in asn1_der_decoding (CVE-2015-2806)

  - libtasn1: Stack-based buffer overflow in asn1_find_node() (CVE-2017-6891)

  - libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion (CVE-2018-1000654)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the libtasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A heap-based buffer overflow flaw was found in the way     the libtasn1 library decoded certain DER-encoded     inputs. A specially crafted DER-encoded input could     cause an application using libtasn1 to perform an     invalid read, causing the application to crash.
    (CVE-2015-3622)

  - A stack-based buffer overflow was found in the way     libtasn1 decoded certain DER encoded data. An attacker     could use this flaw to crash an application using the     libtasn1 library. (CVE-2015-2806)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for libtasn1 is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Libtasn1 is a library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

The following packages have been upgraded to a later upstream version:
libtasn1 (4.10). (BZ#1360639)

Security Fix(es) :

* A heap-based buffer overflow flaw was found in the way the libtasn1 library decoded certain DER-encoded inputs. A specially crafted DER-encoded input could cause an application using libtasn1 to perform an invalid read, causing the application to crash. (CVE-2015-3622)

* A stack-based buffer overflow was found in the way libtasn1 decoded certain DER encoded data. An attacker could use this flaw to crash an application using the libtasn1 library. (CVE-2015-2806)

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.

The following packages have been upgraded to a later upstream version:
libtasn1 (4.10).

Security Fix(es) :

  - A heap-based buffer overflow flaw was found in the way     the libtasn1 library decoded certain DER-encoded inputs.
    A specially crafted DER- encoded input could cause an     application using libtasn1 to perform an invalid read,     causing the application to crash. (CVE-2015-3622)

  - A stack-based buffer overflow was found in the way     libtasn1 decoded certain DER encoded data. An attacker     could use this flaw to crash an application using the     libtasn1 library. (CVE-2015-2806)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1860 advisory.

    [4.10-1]
    - Updated to the 4.x branch (#1360639)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1860 advisory.

    Libtasn1 is a library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T     recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690)     encoding and decoding functions.

    The following packages have been upgraded to a later upstream version: libtasn1 (4.10). (BZ#1360639)

    Security Fix(es):

    * A heap-based buffer overflow flaw was found in the way the libtasn1 library decoded certain DER-encoded     inputs. A specially crafted DER-encoded input could cause an application using libtasn1 to perform an     invalid read, causing the application to crash. (CVE-2015-3622)

    * A stack-based buffer overflow was found in the way libtasn1 decoded certain DER encoded data. An     attacker could use this flaw to crash an application using the libtasn1 library. (CVE-2015-2806)

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for gnutls fixes the following security issues :

  - CVE-2015-8313: First byte of the padding in CBC mode is     not checked (bsc#957568)

  - CVE-2015-2806: Two-byte stack overflow in     asn1_der_decoding (bsc#924828)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201509-04 (libtasn1: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in libtasn1. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The ASN.1 parsing library libtasn1 was updated to fix one memory handling issue.

The following vulnerability was fixed :

  - CVE-2015-2806: A stack-based buffer overflow in libtasn1     allowed remote attackers to have unspecified impact via     unknown vectors.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The ASN.1 parsing library libtasn1 was updated to fix one memory handling issue :

CVE-2015-2806: A stack-based buffer overflow in libtasn1 allowed remote attackers to have unspecified impact via unknown vectors.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The ASN.1 parsing library libtasn1 was updated to fix one memory handling issue :

  - A stack-based buffer overflow in libtasn1 allowed remote     attackers to have unspecified impact via unknown     vectors. (CVE-2015-2806)

The ASN.1 parsing library libtasn1 was updated to fix one memory handling issue.

The following vulnerability was fixed :

  - CVE-2015-2806: A stack-based buffer overflow in libtasn1     allowed remote attackers to have unspecified impact via     unknown vectors.

Debian reports :

Hanno Boeck discovered a stack-based buffer overflow in the asn1_der_decoding function in Libtasn1, a library to manage ASN.1 structures. A remote attacker could take advantage of this flaw to cause an application using the Libtasn1 library to crash, or potentially to execute arbitrary code.

Security fix for CVE-2015-2806.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

libtasn1 4.4 release, fixing CVE-2015-2806.

GnuTLS 3.3.14 release

http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/8077

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

new upstream release (#1206968)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

backported fix for stack overflow in DER decoder

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Hanno Boeck discovered a stack-based buffer overflow in the asn1_der_decoding function in Libtasn1, a library to manage ASN.1 structures. A remote attacker could take advantage of this flaw to cause an application using the Libtasn1 library to crash, or potentially to execute arbitrary code.

Hanno Boeck discovered a stack-based buffer overflow in the asn1_der_decoding function in Libtasn1, a library to manage ASN.1 structures. A remote attacker could take advantage of this flaw to cause an application using the Libtasn1 library to crash, or potentially to execute arbitrary code.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2559-1 advisory.

    Hanno Bck discovered that Libtasn1 incorrectly handled certain ASN.1 data. A remote attacker could     possibly exploit this with specially crafted ASN.1 data and cause applications using Libtasn1 to crash,     resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated libtasn1 packages fix security vulnerability :

The libtasn1 library before version 4.4 is vulnerable to a two-byte stack overflow in asn1_der_decoding (CVE-2015-2806).

ID	Name	Product	Family	Severity
198810	RHEL 6 : libtasn1 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
103010	EulerOS 2.0 SP2 : libtasn1 (EulerOS-SA-2017-1172)	Nessus	Huawei Local Security Checks	critical
103009	EulerOS 2.0 SP1 : libtasn1 (EulerOS-SA-2017-1171)	Nessus	Huawei Local Security Checks	critical
102739	CentOS 7 : libtasn1 (CESA-2017:1860)	Nessus	CentOS Local Security Checks	critical
102647	Scientific Linux Security Update : libtasn1 on SL7.x x86_64 (20170801)	Nessus	Scientific Linux Local Security Checks	critical
102285	Oracle Linux 7 : libtasn1 (ELSA-2017-1860)	Nessus	Oracle Linux Local Security Checks	medium
102146	RHEL 7 : libtasn1 (RHSA-2017:1860)	Nessus	Red Hat Local Security Checks	medium
87887	SUSE SLED11 / SLES11 Security Update : gnutls (SUSE-SU-2016:0077-1)	Nessus	SuSE Local Security Checks	medium
86135	GLSA-201509-04 : libtasn1: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
83728	SUSE SLED12 / SLES12 Security Update : libtasn1 (SUSE-SU-2015:0904-1)	Nessus	SuSE Local Security Checks	critical
83727	SUSE SLED11 / SLES11 Security Update : libtasn1 (SUSE-SU-2015:0901-1)	Nessus	SuSE Local Security Checks	critical
83543	SuSE 11.3 Security Update : libtasn1 (SAT Patch Number 10659)	Nessus	SuSE Local Security Checks	critical
83399	openSUSE Security Update : libtasn1 (openSUSE-2015-360)	Nessus	SuSE Local Security Checks	critical
83024	FreeBSD : libtasn1 -- stack-based buffer overflow in asn1_der_decoding (82595123-e8b8-11e4-a008-047d7b492d07)	Nessus	FreeBSD Local Security Checks	critical
82955	Fedora 20 : mingw-libtasn1-3.8-2.fc20 (2015-5390)	Nessus	Fedora Local Security Checks	critical
82953	Fedora 22 : mingw-gnutls-3.3.14-1.fc22 / mingw-libtasn1-4.4-1.fc22 (2015-5308)	Nessus	Fedora Local Security Checks	critical
82951	Fedora 21 : mingw-gnutls-3.3.14-1.fc21 / mingw-libtasn1-4.4-1.fc21 (2015-5245)	Nessus	Fedora Local Security Checks	critical
82950	Fedora 22 : libtasn1-4.4-1.fc22 (2015-5199)	Nessus	Fedora Local Security Checks	critical
82872	Fedora 20 : libtasn1-3.8-3.fc20 (2015-5182)	Nessus	Fedora Local Security Checks	critical
82871	Fedora 21 : libtasn1-4.4-1.fc21 (2015-5114)	Nessus	Fedora Local Security Checks	critical
82721	Debian DSA-3220-1 : libtasn1-3 - security update	Nessus	Debian Local Security Checks	critical
82718	Debian DLA-195-1 : libtasn1-3 security update	Nessus	Debian Local Security Checks	critical
82659	Ubuntu 14.04 LTS : Libtasn1 vulnerability (USN-2559-1)	Nessus	Ubuntu Local Security Checks	low
82617	Mandriva Linux Security Advisory : libtasn1 (MDVSA-2015:193)	Nessus	Mandriva Local Security Checks	critical

Detections

Analytics

CVE-2015-2806

low

Tenable Plugins

critical

critical

critical

critical

critical

medium

medium

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

low

critical