Lucene search

[email protected]CVE-2006-0645

HistoryFeb 10, 2006 - 6:06 p.m.

CVE-2006-0645

2006-02-1018:06:00

[email protected]

web.nvd.nist.gov

vulnerability

libtasn1

code execution

der decoder

cve-2006-0645

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.0%

JSON

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via “out-of-bounds access” caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

Affected configurations

NVD

Node

free_software_foundation_inc.libtasn1Match0.1.0

free_software_foundation_inc.libtasn1Match0.1.1

free_software_foundation_inc.libtasn1Match0.1.2

free_software_foundation_inc.libtasn1Match0.2.0

free_software_foundation_inc.libtasn1Match0.2.1

free_software_foundation_inc.libtasn1Match0.2.2

free_software_foundation_inc.libtasn1Match0.2.3

free_software_foundation_inc.libtasn1Match0.2.4

free_software_foundation_inc.libtasn1Match0.2.5

free_software_foundation_inc.libtasn1Match0.2.6

free_software_foundation_inc.libtasn1Match0.2.7

free_software_foundation_inc.libtasn1Match0.2.8

free_software_foundation_inc.libtasn1Match0.2.9

free_software_foundation_inc.libtasn1Match0.2.10

free_software_foundation_inc.libtasn1Match0.2.11

free_software_foundation_inc.libtasn1Match0.2.12

free_software_foundation_inc.libtasn1Match0.2.13

free_software_foundation_inc.libtasn1Match0.2.14

free_software_foundation_inc.libtasn1Match0.2.15

free_software_foundation_inc.libtasn1Match0.2.16

free_software_foundation_inc.libtasn1Match0.2.17

CPENameOperatorVersion
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.1.0
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.1.1
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.1.2
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.2.0
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.2.1
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.2.2
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.2.3
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.2.4
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.2.5
free_software_foundation_inc.:libtasn1free software foundation inc. libtasn1eq0.2.6

CPE	Name	Operator	Version
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.1.0
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.1.1
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.1.2
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.2.0
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.2.1
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.2.2
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.2.3
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.2.4
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.2.5
free_software_foundation_inc.:libtasn1	free software foundation inc. libtasn1	eq	0.2.6