PublicDateAtUSN: 2015-04-01
Candidate: CVE-2015-2806
PublicDate: 2015-04-10 15:00:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2806
 http://www.openwall.com/lists/oss-security/2015/03/29/4
 https://ubuntu.com/security/notices/USN-2559-1
Description:
 Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4
 allows remote attackers to have unspecified impact via unknown vectors.
Ubuntu-Description:
Notes:
 tyhicks> In Precise and older, it may make sense to just do the one-line
  change of increasing the temp array to 22 bytes. More investigation needed.
Bugs:
Priority: medium
Discovered-by: Hanno Böck
Assigned-to: mdeslaur
CVSS: 

Patches_libtasn1-3:
upstream_libtasn1-3: needs-triage
lucid_libtasn1-3: released (2.4-1ubuntu0.3)
precise_libtasn1-3: released (2.10-1ubuntu1.3)
trusty_libtasn1-3: DNE
trusty/esm_libtasn1-3: DNE
utopic_libtasn1-3: DNE
devel_libtasn1-3: DNE

Patches_libtasn1-6:
 upstream: http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commitdiff;h=e47b2a0651ffe1867c844968ade7f6127957bf13 (3.x bp)
 upstream: http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commitdiff;h=f7ae724333b59013413158b88e10cdb936c5eeab (3.x)
 upstream: http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commit;h=e47b2a0651ffe1867c844968ade7f6127957bf13 (4.x bp)
 upstream: http://git.savannah.gnu.org/gitweb/?p=libtasn1.git;a=commitdiff;h=4d4f992826a4962790ecd0cce6fbba4a415ce149 (4.x)
upstream_libtasn1-6: needs-triage
lucid_libtasn1-6: DNE
precise_libtasn1-6: DNE
trusty_libtasn1-6: released (3.4-3ubuntu0.2)
trusty/esm_libtasn1-6: released (3.4-3ubuntu0.2)
utopic_libtasn1-6: released (4.0-2ubuntu0.1)
devel_libtasn1-6: released (4.2-2ubuntu1)