CVE-2015-2806

High

Published: 10/04/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in asn1_der_decoding in libtasn1 before version 4.4 allows remote attackers to have unspecified impact.

Risk Assessment

Attackers may exploit this vulnerability to gain control over the system or inject malicious code, posing a serious security threat to the organization.

Recommendation

It is recommended to update the libtasn1 library to version 4.4 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in libtasn1

CVE-2024-12133Medium
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

Original NVD description (English source)

Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS