CyberSec.Space Logo
Back to CVE Browser

CVE-2015-2806

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1070%
EPSS Percentile36.84th
PublishedApr 10, 2015
Last ModifiedMay 6, 2026

Vulnerability Description

Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

Affected Platforms (CPE)

💻
Canonical

Ubuntu Linux

= 10.04
💻
Canonical

Ubuntu Linux

= 12.04
💻
Canonical

Ubuntu Linux

= 14.04
💻
Canonical

Ubuntu Linux

= 14.10
💻
Debian

Debian Linux

= 7.0
💻
Fedoraproject

Fedora

= 20
💻
Fedoraproject

Fedora

= 21
💻
Fedoraproject

Fedora

= 22
📦
Gnu

Libtasn1

<= 4.3

References & Advisories

🔗 http://git.savannah.gnu.org/gitweb/?p=libtasn1.git%3Ba=commit%3Bh=4d4f992826a4962790ecd0cce6fbba4a415ce149
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154741.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154805.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155117.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155270.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155435.html
🔗 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155483.html
🔗 http://www.debian.org/security/2015/dsa-3220

Related Vulnerabilities

CVE-2021-344239.8

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before ve...

CVE-2018-66349.8

A vulnerability in Parsec Windows 142-0 and Parsec 'Linux Ubuntu 16.04 LTS Desktop' Build 142-1 allows unauthorized users to maint...

CVE-2021-34938.8

The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file cap...

CVE-2021-34928.8

Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during cop...