CVE-2014-3467
Medium
Description
Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Gnutls
PublishedJun 5, 2014
First seenJun 5, 2014
How to fix
Update
- gnu gnutls3.5.7 or later
- gnu libtasn13.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu gnutls | v < 3.5.7 | 3.5.7 |
| gnu libtasn1 | v < 3.6 | 3.6 |
| redhat virtualization | 6.0 | — |
| debian debian_linux | 7.0 | — |
| redhat enterprise_linux_desktop | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_eus | 6.5, 7.3, 7.4, 7.5, 7.6, 7.7 | — |
| redhat enterprise_linux_server | 5.0, 6.0, 7.0 | — |
| redhat enterprise_linux_server_aus | 6.5, 7.3, 7.4, 7.6, 7.7 | — |
| redhat enterprise_linux_server_tus | 6.5, 7.3, 7.6, 7.7 | — |
| redhat enterprise_linux_workstation | 5.0, 6.0, 7.0 | — |
| suse linux_enterprise_desktop | 11 | — |
| suse linux_enterprise_high_availability_extension | 11 | — |
| suse linux_enterprise_server | 11 | — |
| suse linux_enterprise_software_development_kit | 11 | — |
| f5 arx_firmware | 6.0.0 ≤ v ≤ 6.4.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.