Msrc Azl3 Libtomcrypt 1.18.2-9 On Azure Linux 3.0 vulnerabilities

1 known vulnerability affecting msrc/azl3_libtomcrypt_1.18.2-9_on_azure_linux_3.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2019-17362CRITICALCVSS 9.12019-10-08

CVE-2019-17362 [CRITICAL] CWE-125 In LibTomCrypt through 1.18.2 the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cau In LibTomCrypt through 1.18.2 the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTF-8 sequences. This allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) or read inf