● CVE
CVE-2014-3468
Vendordebian, suse, redhat, gnu, f5Productdebian linux, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus, enterprise linux desktop, linux enterprise high availability extension, enterprise linux workstation, virtualization, libtasn1, gnutls, arx firmwareDiscoveredJun 5, 2014UpdatedMay 6, 2026
The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.1 data.