ALPINE-CVE-2018-1000654

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2018-1000654
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2018-1000654
Upstream
Published
2018-08-20T19:31:44Z
Modified
2026-06-09T21:31:11Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

References

Affected packages

Alpine:v3.10
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.11
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.12
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.13
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.14
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.15
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.16
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.17
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.18
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.19
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.20
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.21
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.22
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.23
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.24
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.7
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.12-r4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.8
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"
Alpine:v3.9
libtasn1

Package

Name
libtasn1
Purl
pkg:apk/alpine/libtasn1?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.14-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-1000654.json"