CVE-2017-6891

NameCVE-2017-6891
DescriptionTwo errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-950-1, DSA-3861-1
NVD severitymedium (attack range: remote)
Debian Bugs863186

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libtasn1-3 (PTS)wheezy2.13-2+deb7u2vulnerable
wheezy (security)2.13-2+deb7u5fixed
libtasn1-6 (PTS)jessie (security), jessie4.2-3+deb8u3fixed
stretch4.10-1.1fixed
buster, sid4.12-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libtasn1-3source(unstable)(unfixed)medium
libtasn1-3sourcewheezy2.13-2+deb7u4mediumDLA-950-1
libtasn1-6source(unstable)4.10-1.1medium863186
libtasn1-6sourcejessie4.2-3+deb8u3mediumDSA-3861-1

Notes

https://secuniaresearch.flexerasoftware.com/secunia_research/2017-11/
https://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commit;h=5520704d075802df25ce4ffccc010ba1641bd484

Search for package or bug name: Reporting problems