CVE-2018-6003: High severity GNU Libtasn1 vulnerability
An issue was discovered in the asn1decodesimpleber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to stack exhaustion and DoS.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libtasn1-6to a version that resolves this vulnerability.Fixed in 4.16.0-2+deb11u1Fixed in 4.16.0-2+deb11u2Fixed in 4.19.0-2+deb12u1Fixed in 4.20.0-2Fixed in 4.21.0-2 - Upgrade
Upgrade
GNU Libtasn1 (decoding.c, _asn1_decode_simple_ber)to a version that resolves this vulnerability.Fixed in 4.13
Event History
Frequently Asked Questions
What is CVE-2018-6003?
CVE-2018-6003 is a vulnerability in GNU Libtasn1 before 4.13 that allows unlimited recursion in the BER decoder, leading to stack exhaustion and DoS.
How does CVE-2018-6003 affect users?
Users of GNU Libtasn1 versions before 4.13 are affected by CVE-2018-6003, which can result in a Denial of Service (DoS) condition.
What is the severity of CVE-2018-6003?
The severity of CVE-2018-6003 is rated as high with a CVSS score of 7.5.
How can I fix CVE-2018-6003?
To fix CVE-2018-6003, users should update to GNU Libtasn1 version 4.13 or later.
Where can I find more information about CVE-2018-6003?
For more information about CVE-2018-6003, you can refer to the following references: [link1], [link2], [link3].