https://bugzilla.redhat.com/show_bug.cgi?id=1821879
Bug ID: 1821879 Summary: CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team@redhat.com Reporter: gsuckevi@redhat.com CC: caillon+fedoraproject@gmail.com, caolanm@redhat.com, john.j5live@gmail.com, jplesnik@redhat.com, kasal@ucw.cz, perl-devel@lists.fedoraproject.org, perl-maint-list@redhat.com, ppisar@redhat.com, psabata@redhat.com, rhughes@redhat.com, rstrode@redhat.com, sandmann@redhat.com Target Milestone: --- Classification: Other
perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input.
Reference: https://github.com/gbarr/perl-Convert-ASN1/issues/14
https://bugzilla.redhat.com/show_bug.cgi?id=1821879
Guilherme de Almeida Suckevicz gsuckevi@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1821880 Depends On| |1821881, 1821882
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1821881 [Bug 1821881] CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1821882 [Bug 1821882] CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=1821879
--- Comment #1 from Guilherme de Almeida Suckevicz gsuckevi@redhat.com --- Created perl-Convert-ASN1 tracking bugs for this issue:
Affects: epel-8 [bug 1821882] Affects: fedora-all [bug 1821881]
https://bugzilla.redhat.com/show_bug.cgi?id=1821879
Stefan Cornelius scorneli@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1822320, 1822321
https://bugzilla.redhat.com/show_bug.cgi?id=1821879 Bug 1821879 depends on bug 1821882, which changed state.
Bug 1821882 Summary: CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=1821882
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution|--- |EOL
https://bugzilla.redhat.com/show_bug.cgi?id=1821879 Bug 1821879 depends on bug 1821881, which changed state.
Bug 1821881 Summary: CVE-2013-7488 perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1821881
What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA
https://bugzilla.redhat.com/show_bug.cgi?id=1821879
--- Comment #8 from errata-xmlrpc errata-xmlrpc@redhat.com --- This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2024:3049 https://access.redhat.com/errata/RHSA-2024:3049
https://bugzilla.redhat.com/show_bug.cgi?id=1821879
errata-xmlrpc errata-xmlrpc@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2024:3049
perl-devel@lists.fedoraproject.org