Test ID:	1.3.6.1.4.1.25623.1.0.703256
Category:	Debian Local Security Checks
Title:	Debian Security Advisory DSA 3256-1 (libtasn1-6 - security update)
Summary:	Hanno Boeck discovered a heap-based buffer overflow flaw in the way;Libtasn1, a library to manage ASN.1 structures, decoded certain;DER-encoded input. A specially crafted DER-encoded input could cause an;application using the Libtasn1 library to crash, or potentially to;execute arbitrary code.
Description:	Summary: Hanno Boeck discovered a heap-based buffer overflow flaw in the way Libtasn1, a library to manage ASN.1 structures, decoded certain DER-encoded input. A specially crafted DER-encoded input could cause an application using the Libtasn1 library to crash, or potentially to execute arbitrary code. Affected Software/OS: libtasn1-6 on Debian Linux Solution: For the stable distribution (jessie), this problem has been fixed in version 4.2-3+deb8u1. For the testing distribution (stretch), this problem has been fixed in version 4.4-3. For the unstable distribution (sid), this problem has been fixed in version 4.4-3. We recommend that you upgrade your libtasn1-6 packages. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3622 BugTraq ID: 74419 http://www.securityfocus.com/bid/74419 Debian Security Information: DSA-3256 (Google Search) http://www.debian.org/security/2015/dsa-3256 http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158225.html http://seclists.org/fulldisclosure/2015/Apr/109 https://security.gentoo.org/glsa/201509-04 http://www.mandriva.com/security/advisories?name=MDVSA-2015:232 http://packetstormsecurity.com/files/131711/libtasn1-Heap-Overflow.html https://lists.gnu.org/archive/html/help-libtasn1/2015-04/msg00000.html RedHat Security Advisories: RHSA-2017:1860 https://access.redhat.com/errata/RHSA-2017:1860 http://www.securitytracker.com/id/1032246 SuSE Security Announcement: openSUSE-SU-2015:1372 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-08/msg00014.html SuSE Security Announcement: openSUSE-SU-2016:1567 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-06/msg00047.html SuSE Security Announcement: openSUSE-SU-2016:1674 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-06/msg00097.html http://www.ubuntu.com/usn/USN-2604-1
Copyright	Copyright (c) 2015 Greenbone Networks GmbH http://greenbone.net

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.