CVE-2006-0645

Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via "out-of-bounds access" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.

Published: Feb 10, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-0645
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
free_software_foundation_inc. / libtasn1	0.1.1	0.1.1.x
free_software_foundation_inc. / libtasn1	0.2.0	0.2.0.x
free_software_foundation_inc. / libtasn1	0.2.1	0.2.1.x
free_software_foundation_inc. / libtasn1	0.2.3	0.2.3.x
free_software_foundation_inc. / libtasn1	0.2.7	0.2.7.x
free_software_foundation_inc. / libtasn1	0.2.13	0.2.13.x
free_software_foundation_inc. / libtasn1	0.2.16	0.2.16.x
free_software_foundation_inc. / libtasn1	0.2.17	0.2.17.x
free_software_foundation_inc. / libtasn1	0.2.9	0.2.9.x
free_software_foundation_inc. / libtasn1	0.1.0	0.1.0.x
free_software_foundation_inc. / libtasn1	0.2.10	0.2.10.x
free_software_foundation_inc. / libtasn1	0.2.6	0.2.6.x
free_software_foundation_inc. / libtasn1	0.2.14	0.2.14.x
free_software_foundation_inc. / libtasn1	0.2.11	0.2.11.x
free_software_foundation_inc. / libtasn1	0.1.2	0.1.2.x
free_software_foundation_inc. / libtasn1	0.2.15	0.2.15.x
free_software_foundation_inc. / libtasn1	0.2.8	0.2.8.x
free_software_foundation_inc. / libtasn1	0.2.2	0.2.2.x
free_software_foundation_inc. / libtasn1	0.2.4	0.2.4.x
free_software_foundation_inc. / libtasn1	0.2.5	0.2.5.x
free_software_foundation_inc. / libtasn1	0.2.12	0.2.12.x

Vulnerability Database

289,599

CVE-2006-0645