You are here
Home > Preporuke > Ranjivost programske biblioteke libtasn1

Ranjivost programske biblioteke libtasn1

  • Detalji os-a: LUB
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LUB

==========================================================================
Ubuntu Security Notice USN-2559-1
April 08, 2015

libtasn1-3, libtasn1-6 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 14.10
– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS
– Ubuntu 10.04 LTS

Summary:

Libtasn1 could be made to crash or run programs if it processed specially
crafted data.

Software Description:
– libtasn1-6: Library to manage ASN.1 structures
– libtasn1-3: Library to manage ASN.1 structures

Details:

Hanno Böck discovered that Libtasn1 incorrectly handled certain ASN.1 data.
A remote attacker could possibly exploit this with specially crafted ASN.1
data and cause applications using Libtasn1 to crash, resulting in a denial
of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
libtasn1-6 4.0-2ubuntu0.1

Ubuntu 14.04 LTS:
libtasn1-6 3.4-3ubuntu0.2

Ubuntu 12.04 LTS:
libtasn1-3 2.10-1ubuntu1.3

Ubuntu 10.04 LTS:
libtasn1-3 2.4-1ubuntu0.3

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2559-1
CVE-2015-2806

Package Information:
https://launchpad.net/ubuntu/+source/libtasn1-6/4.0-2ubuntu0.1
https://launchpad.net/ubuntu/+source/libtasn1-6/3.4-3ubuntu0.2
https://launchpad.net/ubuntu/+source/libtasn1-3/2.10-1ubuntu1.3
https://launchpad.net/ubuntu/+source/libtasn1-3/2.4-1ubuntu0.3

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1

iQIcBAEBCgAGBQJVJUIwAAoJEGVp2FWnRL6T78EP/AimG7H66za8xG3aldU/7Kwp
syITDQmN94WkxjpAQ8u+TFStEf7QLzvtN0HteNAeKVAdZLlMF48eGr2sthsLAtTj
iRjv5MWhMZTVmEV49xYxRcfZ4vIm2QGCbnLu+BlUXYo3cdv8HOpszzJ+BgCss//f
oaZGcgMRWj2ZWhr1HRf9wmmdv134caPtkkzYxY8PGgxP+1oXDo4Hkja/RyFxjvV2
YXZKzPmagj2NfRPprfaImJnDo6gUmKbxQRxcIptCOOazsToGaAt5wO2+0OD9oP7E
VMr4aUciH+ndR7DswINiiO3jcE7xwo3pOYmpRfcz/+gvxTp50FgqbjaGOll2XMAn
tCDrwVD1BFyzBk5KuFR24OSNhW98bQR7MAX/44cub/KLraJO2cOTN3rps7mIBsXe
qFyCjrUe7/6WIgeyXIkLccV3TX+WAUPnnryTl5Mkfg30vhvIZgU4JpNwmVEDX4TJ
ondLQf3OSLxBPrQ9gLplHEmY3/X9uVVzUrxvbLP4FEUMNWT+bzbWbO+0/L7qHrNZ
eFnJWfPpiwsB4qxQRAFe1nVhlsBRWs676N6X3eBcQdYn7yXEfsqiCm4Nlm6vSBtc
rvgh/HY8noDSyyo2s3vQK20+ePS9SEVqWDmUjToeUL5claSHX0UA7zj2vtvJjdWU
UvBq407eKL7q7o1oll9W
=BsV4
—–END PGP SIGNATURE—–

AutorTomislav Protega
Cert idNCERT-REF-2015-04-0031-ADV
CveCVE-2015-2806
ID izvornikaUSN-2559-1
Proizvodlibtasn1-3, libtasn1-6
Izvorhttp://www.ubuntu.com
Top
More in Preporuke
Ranjivosti programskog paketa Chromium

Otkrivene su dvije ranjivosti programskog paketa Chromium za openSUSE. Prva ranjivost posljedica je nepravilnog upravljanja IPC-om, Gamepad API-om i Google...

Close