GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
Weakness
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libtasn1 | Gnu | * | 4.19.0 (excluding) |
| Red Hat Enterprise Linux 8 | RedHat | libtasn1-0:4.13-4.el8_7 | * |
| Red Hat Enterprise Linux 8 | RedHat | libtasn1-0:4.13-4.el8_7 | * |
| Red Hat Enterprise Linux 8.6 Extended Update Support | RedHat | libtasn1-0:4.13-3.el8_6.1 | * |
| Red Hat Enterprise Linux 9 | RedHat | libtasn1-0:4.16.0-8.el9_1 | * |
| Red Hat Enterprise Linux 9 | RedHat | libtasn1-0:4.16.0-8.el9_1 | * |
| Libtasn1-6 | Ubuntu | bionic | * |
| Libtasn1-6 | Ubuntu | esm-infra-legacy/trusty | * |
| Libtasn1-6 | Ubuntu | esm-infra/bionic | * |
| Libtasn1-6 | Ubuntu | esm-infra/focal | * |
| Libtasn1-6 | Ubuntu | esm-infra/xenial | * |
| Libtasn1-6 | Ubuntu | focal | * |
| Libtasn1-6 | Ubuntu | jammy | * |
| Libtasn1-6 | Ubuntu | kinetic | * |
| Libtasn1-6 | Ubuntu | lunar | * |
| Libtasn1-6 | Ubuntu | trusty | * |
| Libtasn1-6 | Ubuntu | trusty/esm | * |
| Libtasn1-6 | Ubuntu | upstream | * |
| Libtasn1-6 | Ubuntu | xenial | * |
Potential Mitigations
References
- https://bugs.gentoo.org/866237
- https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5
- https://gitlab.com/gnutls/libtasn1/-/issues/32
- https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/
- https://security.netapp.com/advisory/ntap-20221118-0006/
- https://bugs.gentoo.org/866237
- https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5
- https://gitlab.com/gnutls/libtasn1/-/issues/32
- https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/
- https://security.netapp.com/advisory/ntap-20221118-0006/