Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-0645
HistoryFeb 10, 2006 - 12:00 a.m.

CVE-2006-0645

2006-02-1000:00:00
ubuntu.com
ubuntu.com
11

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.03 Low

EPSS

Percentile

91.0%

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x
before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers
to crash the DER decoder and possibly execute arbitrary code via
“out-of-bounds access” caused by invalid input, as demonstrated by the
ProtoVer SSL test suite.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlibtasn1-2< 0.2.17-1ubuntu1UNKNOWN

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.03 Low

EPSS

Percentile

91.0%