CVE-2019-25049
published 2021-07-01CVE-2019-25049: LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).
PriorityP423high7.1CVSS 3.1
AVLACLPRNUIRSUCHINAH
EPSS
0.88%
55.0th percentile
LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx).
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openbsd | libressl | 2.9.1 – 3.2.1 | — |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1965.yamlhttps://github.com/libressl-portable/portable/commit/17c88164016df821df2dff4b2b1291291ec4f28ahttps://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13920https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libressl/OSV-2020-1965.yamlhttps://github.com/libressl-portable/portable/commit/17c88164016df821df2dff4b2b1291291ec4f28a
2021-07-01
Published