Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-3468
HistoryJun 05, 2014 - 8:55 p.m.

CVE-2014-3468

2014-06-0520:55:06
CWE-131
[email protected]
web.nvd.nist.gov
58
cve-2014-3468
gnu libtasn1
security vulnerability
asn.1
out-of-bounds access

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.9%

JSON

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.

Affected configurations

NVD
Node
gnugnutlsRange<3.5.7
OR
gnulibtasn1Range<3.6
Node
redhatvirtualizationMatch6.0
OR
debiandebian_linuxMatch7.0
OR
redhatenterprise_linux_desktopMatch5.0
OR
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_eusMatch6.5
OR
redhatenterprise_linux_eusMatch7.3
OR
redhatenterprise_linux_eusMatch7.4
OR
redhatenterprise_linux_eusMatch7.5
OR
redhatenterprise_linux_eusMatch7.6
OR
redhatenterprise_linux_eusMatch7.7
OR
redhatenterprise_linux_serverMatch5.0
OR
redhatenterprise_linux_serverMatch6.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch6.5
OR
redhatenterprise_linux_server_ausMatch7.3
OR
redhatenterprise_linux_server_ausMatch7.4
OR
redhatenterprise_linux_server_ausMatch7.6
OR
redhatenterprise_linux_server_ausMatch7.7
OR
redhatenterprise_linux_server_tusMatch6.5
OR
redhatenterprise_linux_server_tusMatch7.3
OR
redhatenterprise_linux_server_tusMatch7.6
OR
redhatenterprise_linux_server_tusMatch7.7
OR
redhatenterprise_linux_workstationMatch5.0
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
suselinux_enterprise_desktopMatch11sp3
OR
suselinux_enterprise_high_availability_extensionMatch11sp3
OR
suselinux_enterprise_serverMatch11sp1ltss
OR
suselinux_enterprise_serverMatch11sp2ltss
OR
suselinux_enterprise_serverMatch11sp3-
OR
suselinux_enterprise_serverMatch11sp3vmware
OR
suselinux_enterprise_software_development_kitMatch11sp3
Node
debiandebian_linuxMatch7.0
Node
f5arx_firmwareRange6.0.0–6.4.0
AND
f5arxMatch-

References

Related

cvelist 1
debiancve 1
prion 1
veracode 2
nvd 1
ubuntucve 1
f5 2
nessus 28
openvas 26
redhat 4
fedora 2
centos 2
ubuntu 1
debian 2
suse 6
osv 1
slackware 2
gentoo 1
oraclelinux 3
amazon 1
mageia 1
securityvulns 2
rosalinux 1
cvelist
cvelist
CVE-2014-3468
2014-06-05 20:00:00
debiancve
debiancve
CVE-2014-3468
2014-06-05 20:55:06
prion
prion
Out-of-bounds
2014-06-05 20:55:00
veracode
veracode
Out-of-Bounds Access
2018-08-13 08:27:26
Denial Of Service (DoS)
2019-05-02 05:03:32
nvd
nvd
CVE-2014-3468
2014-06-05 20:55:06
ubuntucve
ubuntucve
CVE-2014-3468
2014-06-05 00:00:00
f5
f5
SOL15423 - GNU Libtasn1 vulnerabilities CVE-2014-3467 and CVE-2014-3468
2014-07-17 00:00:00
K15423 : GNU Libtasn1 vulnerabilities CVE-2014-3467 and CVE-2014-3468
2014-07-17 00:00:00
nessus
nessus
Oracle Solaris Third-Party Patch Update : libtasn1 (multiple_vulnerabilities_in_gnu_libtasn1)
2015-01-19 00:00:00
Slackware 14.0 / 14.1 / current : libtasn1 (SSA:2014-156-02)
2014-06-06 00:00:00
GLSA-201408-09 : GNU Libtasn1: Multiple vulnerabilities
2014-08-30 00:00:00
openvas
openvas
Fedora Update for libtasn1 FEDORA-2014-6919
2014-06-17 00:00:00
Debian: Security Advisory (DLA-77-1)
2023-03-08 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-359)
2015-09-08 00:00:00
redhat
redhat
(RHSA-2014:0687) Moderate: libtasn1 security update
2014-06-10 00:00:00
(RHSA-2014:0596) Moderate: libtasn1 security update
2014-06-03 00:00:00
(RHSA-2014:0594) Important: gnutls security update
2014-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libtasn1-3.6-1.fc19
2014-06-10 03:06:24
[SECURITY] Fedora 20 Update: libtasn1-3.6-1.fc20
2014-06-04 07:52:16
centos
centos
libtasn1 security update
2014-06-04 10:04:23
gnutls security update
2014-06-04 09:31:23
ubuntu
ubuntu
Libtasn1 vulnerabilities
2014-07-22 00:00:00
debian
debian
[SECURITY] [DLA 77-1] libtasn1-3 security update
2014-10-26 13:15:15
[SECURITY] [DSA 3056-1] libtasn1-3 security update
2014-10-26 12:44:20
suse
suse
Security update for libtasn1 (important)
2014-07-24 03:05:20
Security update for GnuTLS (important)
2014-06-13 00:04:29
Security update for gnutls (important)
2014-06-05 03:04:15
osv
osv
libtasn1-3 - security update
2014-10-26 00:00:00
slackware
slackware
[slackware-security] libtasn1
2014-06-06 05:26:49
[slackware-security] gnutls
2014-06-06 05:26:16
gentoo
gentoo
GNU Libtasn1: Multiple vulnerabilities
2014-08-29 00:00:00
oraclelinux
oraclelinux
libtasn1 security update
2014-07-23 00:00:00
libtasn1 security update
2014-06-03 00:00:00
gnutls security update
2014-06-03 00:00:00
amazon
amazon
Medium: libtasn1
2014-06-15 16:22:00
mageia
mageia
Updated libtasn1 packages fix CVE-2014-3467-9
2014-06-02 22:44:30
securityvulns
securityvulns
GnuTLS and libtasn1 multiple security vulnerabilities
2014-06-02 00:00:00
[oss-security] GnuTLS and libtasn1 security fixes
2014-06-02 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1847
2021-07-02 16:58:09

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.9%

JSON
Related for CVE-2014-3468
cvelist1debiancve1prion1veracode2nvd1ubuntucve1f52nessus28openvas26redhat4fedora2centos2ubuntu1debian2suse6osv1slackware2gentoo1oraclelinux3amazon1mageia1securityvulns2rosalinux1