Oval Definition:oval:com.ubuntu.precise:def:20143468000
Revision Date:2014-06-05Version:1
Title:CVE-2014-3468 on Ubuntu 12.04 LTS (precise) - medium.
Description:The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-3468
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'libtasn1-3' package in precise was vulnerable but has been fixed (note: '2.10-1ubuntu1.2').
    • BACK