NULL pointer dereference in Gnu Gnutls
CVE-2014-3469
The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue argument.
EPSS: 0.038 (88.9th percentile) — read the EPSS interpretation.
Affected products
- Gnu Gnutls
- Gnu Libtasn1
- Debian Debian_linux — versions 7.0
- Redhat Enterprise_linux_desktop — versions 5.0, 6.0, 7.0
- Redhat Enterprise_linux_eus — versions 6.5, 7.3, 7.4
- Redhat Enterprise_linux_server — versions 5.0, 6.0, 7.0
- Redhat Enterprise_linux_server_aus — versions 6.5, 7.3, 7.4
- Redhat Enterprise_linux_server_tus — versions 6.5, 7.3, 7.6
- Redhat Enterprise_linux_workstation — versions 5.0, 6.0, 7.0
- Redhat Virtualization — versions 6.0
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Third Party Advisory)