[ GLSA 201710-11 ] GNU Libtasn1

[GLSA]

Gentoo Linux Security Advisory

Title: GNU Libtasn1: Multiple vulnerabilities (GLSA 201710-11)
Severity: normal
Exploitable: remote
Date: 2017-10-13
Bug(s): #619686, #627014
ID: 201710-11

Synopsis

Multiple vulnerabilities have been found in GNU Libtasn1, the worst
of which may allow remote attackers to execute arbitrary code.


Background

A library that provides Abstract Syntax Notation One (ASN.1, as
specified by the X.680 ITU-T recommendation) parsing and structures
management, and Distinguished Encoding Rules (DER, as per X.690) encoding
and decoding functions.


Affected Packages

Package: dev-libs/libtasn1
Vulnerable: < 4.12-r1
Unaffected: >= 4.12-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in GNU Libtasn1. Please
review the referenced CVE identifiers for details.


Impact

A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, or have
other unspecified impacts.


Workaround

There is no known workaround at this time.

Resolution

All GNU Libtasn1 users should upgrade to the latest version: