Home

CVE-2018-1000654

Description

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.125

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2019:1379-1(SUSE Linux Enterprise Desktop 12-SP4 ) libtasn1-4.9-3.10.1.x86_64.rpmLinux
SUSE-SU-2019:1379-1(SUSE Linux Enterprise Desktop 12-SP3 ) libtasn1-6-4.9-3.10.1.x86_64.rpmLinux
SUSE-SU-2019:1379-1(SUSE Linux Enterprise Desktop 12-SP3 ) libtasn1-6-32bit-4.9-3.10.1.x86_64.rpmLinux
SUSE-SU-2019:1379-1(SUSE Linux Enterprise Desktop 12-SP3 ) libtasn1-6-debuginfo-4.9-3.10.1.x86_64.rpmLinux
SUSE-SU-2019:1379-1(SUSE Linux Enterprise Desktop 12-SP3 ) libtasn1-6-debuginfo-32bit-4.9-3.10.1.x86_64.rpmLinux
SUSE-SU-2019:1379-1(SUSE Linux Enterprise Desktop 12-SP3 ) libtasn1-debuginfo-4.9-3.10.1.x86_64.rpmLinux
SUSE-SU-2019:1379-1(SUSE Linux Enterprise Desktop 12-SP3 ) libtasn1-debugsource-4.9-3.10.1.x86_64.rpmLinux
CVE-2018-1000654NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234