CVE-2018-1000654: High severity libtasn1 vulnerability
Published Aug 20, 2018
·Updated
GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in asn1expandobjectid(ptree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.
Affected Software
2 affected components
GNU Libtasn1=4.12
GNU Libtasn1=4.13
Event History
Aug 20, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-1000654?
CVE-2018-1000654 is classified as a medium severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2018-1000654?
To fix CVE-2018-1000654, upgrade to GNU Libtasn1 version 4.14 or later.
3
What issue does CVE-2018-1000654 exploit in GNU Libtasn1?
CVE-2018-1000654 exploits an issue in _asn1_expand_object_id(p_tree), leading to increased CPU usage.
4
Which versions of GNU Libtasn1 are affected by CVE-2018-1000654?
CVE-2018-1000654 affects GNU Libtasn1 versions 4.12 and 4.13.
5
What type of attack is associated with CVE-2018-1000654?
CVE-2018-1000654 is associated with a denial of service (DoS) attack.