Lucene search

K
redosRedosROS-20221103-04
HistoryNov 03, 2022 - 12:00 a.m.

ROS-20221103-04

2022-11-0300:00:00
redos.red-soft.ru
20
libtasn1
vulnerability
asn1_encode_simple_der
exploitation
remote attack
denial-of-service
unix

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

0.004 Low

EPSS

Percentile

73.4%

Libtasn1 library vulnerability is related to ETYPE_OK error in asn1_encode_simple_der function. Exploitation
The vulnerability could allow an attacker acting remotely, passing specially crafted
data, cause a one-by-one error, and perform a denial-of-service (DoS) attack

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libtasn1<= 4.16.0-2UNKNOWN

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

0.004 Low

EPSS

Percentile

73.4%