Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 506
Alerts This Week
Warning Icon 1 506

Ubuntu 15.10 USN-2957-1: Libtasn1 Denial of Service Advisory

ubuntu
Calendar Grey May 2, 2016
Scroller Ubuntu
Ensure your Ubuntu installation is current to fix the Libtasn1 issue which could result in service interruptions due to incorrect data processing.
Libtasn1 could be made to hang if it processed specially crafted data.

Summary

Libtasn1 could be made to hang if it processed specially crafted data.

Software Description:

- libtasn1-6: Library to manage ASN.1 structures

- libtasn1-3: Library to manage ASN.1 structures

Details:

Pascal Cuoq and Miod Vallat discovered that Libtasn1 incorrectly handled

certain malformed DER certificates. A remote attacker could possibly use

this issue to cause applications using Libtasn1 to hang, resulting in a

denial of service.

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu libtasn1 asn.1

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  libtasn1-6                      4.5-2ubuntu0.1

Ubuntu 14.04 LTS:
  libtasn1-6                      3.4-3ubuntu0.4

Ubuntu 12.04 LTS:
  libtasn1-3                      2.10-1ubuntu1.5

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2957-1

CVE-2016-4008

Severity
important
Lowest
Low
Medium
High
Critical

May 02, 2016

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu libtasn1 asn.1

Package Information

https://launchpad.net/ubuntu/+source/libtasn1-6/4.5-2ubuntu0.1
https://launchpad.net/ubuntu/+source/libtasn1-6/3.4-3ubuntu0.4
https://launchpad.net/ubuntu/+source/libtasn1-3/2.10-1ubuntu1.5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.