Detections
Analytics
Scientific Linux Security Update : libtasn1 on SL6.x i386/x86_64 (20140603)
medium Nessus Plugin ID 74307
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
It was discovered that the asn1_get_bit_der() function of the libtasn1 library incorrectly reported the length of ASN.1-encoded data.Specially crafted ASN.1 input could cause an application using libtasn1 to perform an out-of-bounds access operation, causing the application to crash or, possibly, execute arbitrary code.
(CVE-2014-3468)
Multiple incorrect buffer boundary check issues were discovered in libtasn1. Specially crafted ASN.1 input could cause an application using libtasn1 to crash. (CVE-2014-3467)
Multiple NULL pointer dereference flaws were found in libtasn1's asn1_read_value() function. Specially crafted ASN.1 input could cause an application using libtasn1 to crash, if the application used the aforementioned function in a certain way. (CVE-2014-3469)
For the update to take effect, all applications linked to the libtasn1 library must be restarted.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 74307
File Name: sl_20140603_libtasn1_on_SL6_x.nasl
Version: 1.6
Type: local
Agent: unix
Published: 6/4/2014
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:fermilab:scientific_linux:libtasn1, p-cpe:/a:fermilab:scientific_linux:libtasn1-debuginfo, p-cpe:/a:fermilab:scientific_linux:libtasn1-devel, p-cpe:/a:fermilab:scientific_linux:libtasn1-tools, x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 6/3/2014
Vulnerability Publication Date: 6/5/2014