← Vulnerability feed

Vulnerability record · CVE-2018-1000654 · published 20 August 2018

CVE-2018-1000654: Gnu libtasn1 vulnerability

Gnu · Libtasn1

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

5.5 CVSS 3.0 Medium EPSS 2.0% · top 20.0%
5.5CVSS 3.0 base score, v2 7.1
2.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html
http://www.securityfocus.com/bid/105151 Third Party AdvisoryVDB Entry
https://gitlab.com/gnutls/libtasn1/issues/4 ExploitThird Party Advisory
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00009.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00018.html
http://www.securityfocus.com/bid/105151 Third Party AdvisoryVDB Entry
https://gitlab.com/gnutls/libtasn1/issues/4 ExploitThird Party Advisory
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%

Track CVE-2018-1000654 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-2806Canonical ubuntu linux memory buffer overflow vulnerabilityStack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.EPSS 7.7%9.1CVE-2021-46848Gnu libtasn1 vulnerabilityGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.EPSS 2.2%8.8CVE-2017-6891Gnu libtasn1 out-of-bounds write vulnerabilityTwo errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer…EPSS 5.6%7.5CVE-2025-13151Gnu libtasn1 out-of-bounds write vulnerabilityStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn…EPSS 1.1%7.5CVE-2018-6003Gnu libtasn1 vulnerabilityAn issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder lea…EPSS 2.8%7.5CVE-2017-10790Gnu libtasn1 null pointer dereference vulnerabilityThe _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers…EPSS 5.0%7.5CVE-2014-3468Gnutls vulnerabilityThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows con…EPSS 3.8%5.9CVE-2016-4008Canonical ubuntu linux vulnerabilityThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows rem…EPSS 26%

Source: NIST National Vulnerability Database (record CVE-2018-1000654), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.