CVE-2018-1000654 Denial of service in n/a
Attackers can cause a denial of service by providing a crafted file that triggers excessive CPU usage in the ASN.1 parser.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-1000654?
CVE-2018-1000654 is a medium-severity denial of service vulnerability in n/a, published on 20 Aug 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after a long time, the program will be killed. This attack appears to be exploitable via parsing a crafted file.
Which versions are affected by CVE-2018-1000654?
It affects 1 product.
Linux distribution packages (5)
libtasn1 SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 4.13-4.5.1 |
libtasn1 SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 4.13-4.5.1 |
libtasn1 SUSE:Linux Enterprise Module for Desktop Applications 15 | All versions | 4.13-4.5.1 |
libtasn1 openSUSE:Leap 15.0 | All versions | 4.13-lp151.4.3.1 |
libtasn1 openSUSE:Leap 15.1 | All versions | 4.13-lp151.4.3.1 |
Products include Gnu Libtasn1.
How do I fix CVE-2018-1000654?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-1000654 being exploited?
There is no known exploitation of CVE-2018-1000654 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as ALPINE-CVE-2018-1000654, DEBIAN-CVE-2018-1000654, GHSA-g69v-w5wh-rhwv, MGASA-2019-0359, SUSE-SU-2019:1372-1, SUSE-SU-2019:1372-2 and 3 more.