← Vulnerability feed

Vulnerability record · CVE-2017-10790 · published 2 July 2017

CVE-2017-10790: Gnu libtasn1 null pointer dereference vulnerability

Gnu · Libtasn1

The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.

7.5 CVSS 3.0 High EPSS 5.0% · top 8.1% CWE-476 · NULL pointer dereference
7.5CVSS 3.0 base score, v2 5.0
5.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure. It may lead to a remote denial of service attack.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bugzilla.redhat.com/show_bug.cgi?id=1464141 ExploitIssue TrackingThird Party AdvisoryVDB Entry
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.ap
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.ap
https://lists.debian.org/debian-lts-announce/2020/06/msg00026.html
https://security.gentoo.org/glsa/201710-11
https://usn.ubuntu.com/3547-1/
https://www.debian.org/security/2018/dsa-4106
https://bugzilla.redhat.com/show_bug.cgi?id=1464141 ExploitIssue TrackingThird Party AdvisoryVDB Entry
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.ap
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.ap
https://lists.debian.org/debian-lts-announce/2020/06/msg00026.html
https://security.gentoo.org/glsa/201710-11
https://usn.ubuntu.com/3547-1/
https://www.debian.org/security/2018/dsa-4106

Track CVE-2017-10790 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-2806Canonical ubuntu linux memory buffer overflow vulnerabilityStack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.EPSS 7.7%9.1CVE-2021-46848Gnu libtasn1 vulnerabilityGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.EPSS 2.2%8.8CVE-2017-6891Gnu libtasn1 out-of-bounds write vulnerabilityTwo errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer…EPSS 5.6%7.5CVE-2025-13151Gnu libtasn1 out-of-bounds write vulnerabilityStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn…EPSS 1.1%7.5CVE-2018-6003Gnu libtasn1 vulnerabilityAn issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder lea…EPSS 2.8%7.5CVE-2014-3468Gnutls vulnerabilityThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows con…EPSS 3.8%5.9CVE-2016-4008Canonical ubuntu linux vulnerabilityThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows rem…EPSS 26%5.5CVE-2018-1000654Gnu libtasn1 vulnerabilityGNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser ag…EPSS 2.0%

Source: NIST National Vulnerability Database (record CVE-2017-10790), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.