VULNERABILITY INTELLIGENCE

CVE-2017-6891

CVSS score8.8 HIGH
EPSS probability5.58%
CISA KEVNot currently listed
Published2017-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references