CVE-2014-3468: High severity GNU GnuTLS vulnerability
It was discovered that libtasn1 library function asn1getbitder() could incorrectly report negative bit length of the value read from ASN.1 input. This could possibly lead to an out of bounds access in an application using libtasn1, for example in case if application tried to terminate read value with NUL byte.
The following upstream commit corrects the issue and causes the function to report error rather than return negative length value: http://git.savannah.gnu.org/cgit/libtasn1.git/commit/?id=1c3ccb3e040bf13e342ee60bc23b21b97b11923f
Other sources
The asn1getbitder function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3468?
CVE-2014-3468 is classified as a moderate severity vulnerability.
How do I fix CVE-2014-3468?
To address CVE-2014-3468, upgrade the affected libtasn1 library to version 3.6 or later.
Which software is affected by CVE-2014-3468?
CVE-2014-3468 affects multiple versions of the libtasn1 library and software using it, including GNU GnuTLS and Red Hat Enterprise Linux products.
Can CVE-2014-3468 lead to data breaches?
Yes, CVE-2014-3468 has the potential to cause out of bounds access, which could lead to data leaks or crashes in an application utilizing libtasn1.
Is there a workaround for CVE-2014-3468?
There are no known workarounds for CVE-2014-3468; updating the affected software is the recommended action.