Ubuntu 12.04 LTS: 1436-1 Serious Libtasn1 Denial of Service Vulnerability

ubuntu

May 2, 2012

Libtasn1 could be made to crash or run programs as your login if it received specially crafted input.

Summary

Libtasn1 could be made to crash or run programs as your login if it

received specially crafted input.

Software Description:

- libtasn1-3: Library to manage ASN.1 structures

Details:

Matthew Hall discovered that Libtasn1 incorrectly handled certain large

values. An attacker could exploit this with a specially crafted ASN.1

structure and cause a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service security issue critical software update Ubuntu libtasn1

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libtasn1-3                      2.10-1ubuntu1.1

Ubuntu 11.10:
  libtasn1-3                      2.9-4ubuntu0.1

Ubuntu 11.04:
  libtasn1-3                      2.7-1ubuntu1.1

Ubuntu 10.04 LTS:
  libtasn1-3                      2.4-1ubuntu0.1

Ubuntu 8.04 LTS:
  libtasn1-3                      1.1-1ubuntu0.1

In general, a standard system update will make all the necessary changes.