{"api_version":"1","generated_at":"2026-07-23T09:54:46+00:00","cve":"CVE-2006-0645","urls":{"html":"https://cve.report/CVE-2006-0645","api":"https://cve.report/api/cve/CVE-2006-0645.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0645","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0645"},"summary":{"title":"CVE-2006-0645","description":"Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via \"out-of-bounds access\" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.","state":"PUBLISHED","assigner":"redhat","published_at":"2006-02-10 18:06:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:039","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:039","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Advisories - Mandriva Linux","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10540","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10540","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://usn.ubuntu.com/251-1/","name":"https://usn.ubuntu.com/251-1/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-251-1: libtasn vulnerability | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001060.html","name":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001060.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[gnutls-dev] GnuTLS 1.3.4 - Experimental - Security release","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gleg.net/protover_ssl.shtml","name":"http://www.gleg.net/protover_ssl.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"GLEG Ltd. - Information Security Company","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://secunia.com/advisories/18815","name":"http://secunia.com/advisories/18815","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Fedora update for gnutls - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/16568","name":"http://www.securityfocus.com/bid/16568","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"GNUTLS LibTASN1 DER Decoding Denial of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securitytracker.com/id?1015612","name":"http://securitytracker.com/id?1015612","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - GnuTLS libtasn1 DER Decoding Bugs Let Remote Users Deny Service","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18832","name":"http://secunia.com/advisories/18832","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat update for gnutls - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/424538/100/0/threaded","name":"http://www.securityfocus.com/archive/1/424538/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24606","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24606","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.trustix.org/errata/2006/0008","name":"http://www.trustix.org/errata/2006/0008","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/0496","name":"http://www.vupen.com/english/advisories/2006/0496","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup","name":"http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0207.html","name":"http://rhn.redhat.com/errata/RHSA-2006-0207.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/18918","name":"http://secunia.com/advisories/18918","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ubuntu update for libtasn - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18794","name":"http://secunia.com/advisories/18794","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"GnuTLS libtasn1 DER Decoding Denial of Service Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/446","name":"http://securityreason.com/securityalert/446","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - libtasn vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001059.html","name":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001059.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[gnutls-dev] GnuTLS 1.2.10 - Security release","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18830","name":"http://secunia.com/advisories/18830","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Mandriva update for gnutls - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup","name":"http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository - markup - gnupg-mirror: libtasn1/NEWS","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200602-08.xml","name":"http://www.gentoo.org/security/en/glsa/glsa-200602-08.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo Linux Documentation\n--\n  libtasn1, GNU TLS: Security flaw in DER decoding","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18898","name":"http://secunia.com/advisories/18898","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Gentoo update for libtasn1/gnutls - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/19092","name":"http://secunia.com/advisories/19092","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian update for libtasn1-2 - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/19080","name":"http://secunia.com/advisories/19080","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian update for gnutls11 - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/23054","name":"http://www.osvdb.org/23054","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.debian.org/security/2006/dsa-985","name":"http://www.debian.org/security/2006/dsa-985","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-985-1 libtasn1-2","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2006/dsa-986","name":"http://www.debian.org/security/2006/dsa-986","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-986-1 gnutls11","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00043.html","name":"http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00043.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora Core 4 Update: gnutls-1.0.25-2.FC4","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch","name":"http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"404 Not Found","mime":"text/x-diff","httpstatus":"404","archivestatus":"200"},{"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html","name":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[gnutls-dev] Libtasn1 0.2.18 - Tiny ASN.1 Library - Security release","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0645","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0645","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"free_software_foundation_inc.","cpe5":"libtasn1","cpe6":"0.2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"645","cve":"CVE-2006-0645","epss":"0.037210000","percentile":"0.879980000","score_date":"2026-04-16","updated_at":"2026-04-17 00:09:25"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:41:29.006Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"2006-0008","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"],"url":"http://www.trustix.org/errata/2006/0008"},{"name":"18815","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18815"},{"name":"446","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/446"},{"name":"FEDORA-2006-107","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00043.html"},{"name":"19092","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/19092"},{"name":"1015612","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015612"},{"name":"23054","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/23054"},{"name":"18794","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18794"},{"name":"18918","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18918"},{"name":"MDKSA-2006:039","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:039"},{"name":"18830","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18830"},{"name":"oval:org.mitre.oval:def:10540","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10540"},{"name":"[gnutls-dev] 20060209 GnuTLS 1.2.10 - Security release","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001059.html"},{"name":"RHSA-2006:0207","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://rhn.redhat.com/errata/RHSA-2006-0207.html"},{"name":"[gnutls-dev] 20060209 Libtasn1 0.2.18 - Tiny ASN.1 Library - Security release","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html"},{"name":"DSA-986","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2006/dsa-986"},{"name":"DSA-985","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2006/dsa-985"},{"name":"ADV-2006-0496","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/0496"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup"},{"name":"GLSA-200602-08","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200602-08.xml"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.gleg.net/protover_ssl.shtml"},{"name":"gnutls-libtasn1-der-dos(24606)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24606"},{"name":"[gnutls-dev] 20060209 GnuTLS 1.3.4 - Experimental - Security release","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001060.html"},{"name":"16568","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/16568"},{"name":"18832","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18832"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup"},{"name":"USN-251-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/251-1/"},{"name":"19080","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/19080"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch"},{"name":"20060209 ProtoVer SSL: GnuTLS","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/424538/100/0/threaded"},{"name":"18898","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18898"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-02-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via \"out-of-bounds access\" caused by invalid input, as demonstrated by the ProtoVer SSL test suite."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-19T14:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"2006-0008","tags":["vendor-advisory","x_refsource_TRUSTIX"],"url":"http://www.trustix.org/errata/2006/0008"},{"name":"18815","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18815"},{"name":"446","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/446"},{"name":"FEDORA-2006-107","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00043.html"},{"name":"19092","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/19092"},{"name":"1015612","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015612"},{"name":"23054","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/23054"},{"name":"18794","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18794"},{"name":"18918","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18918"},{"name":"MDKSA-2006:039","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:039"},{"name":"18830","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18830"},{"name":"oval:org.mitre.oval:def:10540","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10540"},{"name":"[gnutls-dev] 20060209 GnuTLS 1.2.10 - Security release","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001059.html"},{"name":"RHSA-2006:0207","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://rhn.redhat.com/errata/RHSA-2006-0207.html"},{"name":"[gnutls-dev] 20060209 Libtasn1 0.2.18 - Tiny ASN.1 Library - Security release","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html"},{"name":"DSA-986","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2006/dsa-986"},{"name":"DSA-985","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2006/dsa-985"},{"name":"ADV-2006-0496","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/0496"},{"tags":["x_refsource_CONFIRM"],"url":"http://josefsson.org/cgi-bin/viewcvs.cgi/libtasn1/NEWS?root=gnupg-mirror&view=markup"},{"name":"GLSA-200602-08","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200602-08.xml"},{"tags":["x_refsource_MISC"],"url":"http://www.gleg.net/protover_ssl.shtml"},{"name":"gnutls-libtasn1-der-dos(24606)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24606"},{"name":"[gnutls-dev] 20060209 GnuTLS 1.3.4 - Experimental - Security release","tags":["mailing-list","x_refsource_MLIST"],"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001060.html"},{"name":"16568","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/16568"},{"name":"18832","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18832"},{"tags":["x_refsource_MISC"],"url":"http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup"},{"name":"USN-251-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/251-1/"},{"name":"19080","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/19080"},{"tags":["x_refsource_MISC"],"url":"http://josefsson.org/gnutls/releases/libtasn1/libtasn1-0.2.18-from-0.2.17.patch"},{"name":"20060209 ProtoVer SSL: GnuTLS","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/424538/100/0/threaded"},{"name":"18898","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18898"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2006-0645","datePublished":"2006-02-10T18:00:00.000Z","dateReserved":"2006-02-10T00:00:00.000Z","dateUpdated":"2024-08-07T16:41:29.006Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-02-10 18:06:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D499D565-3346-470E-BA08-B894C85B0312"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"03BD64EF-3350-4C9B-AC99-FF920D469749"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"3003BBC5-47C2-4420-93C9-67144BD7E0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D263ACB-5F52-4E89-A2C2-2D34603221D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D8D228B3-3B1D-49B0-A6E2-047D10F26297"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27DD62D0-E4C8-4198-A00E-3F9061029A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E9C3DA5-B783-4295-B5FA-7C5EAEEAD302"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"DAF60A33-0EAD-4A76-B863-80A3B033705D"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1F145DEE-054A-45BB-B4FB-6421F99150BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3FD24E-DCE0-4228-B94D-9EE2DF151BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"751C6875-E572-4374-97F0-9E6C93BA7B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"0EAA0716-91A0-4EBD-A836-2CF57F77B158"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.9:*:*:*:*:*:*:*","matchCriteriaId":"B3A4EA1F-785D-4F26-8C60-622DC92D5019"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"C22677DF-9598-47EF-8808-FB59138F6195"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"1222294B-6698-47A6-9C4F-60EAA4F97D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A787FA74-6C38-4992-A68F-5AD5281A0B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.13:*:*:*:*:*:*:*","matchCriteriaId":"8E454AAA-CA25-45D4-B5B0-D66F1B425E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.14:*:*:*:*:*:*:*","matchCriteriaId":"4452648C-2AB8-43E5-8617-00134E48C7EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.15:*:*:*:*:*:*:*","matchCriteriaId":"73FA90F4-F2FE-47FA-8F8F-150274082981"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.16:*:*:*:*:*:*:*","matchCriteriaId":"C48CE0BF-19FA-48AE-866E-3AD4E8B6806A"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.17:*:*:*:*:*:*:*","matchCriteriaId":"DC9AD82D-5320-4D1B-B222-BC7F507D9CB4"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"645","Ordinal":"1","Title":"CVE-2006-0645","CVE":"CVE-2006-0645","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"645","Ordinal":"1","NoteData":"Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows attackers to crash the DER decoder and possibly execute arbitrary code via \"out-of-bounds access\" caused by invalid input, as demonstrated by the ProtoVer SSL test suite.","Type":"Description","Title":"CVE-2006-0645"},{"CveYear":"2006","CveId":"645","Ordinal":"2","NoteData":"2006-02-10","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"645","Ordinal":"3","NoteData":"2018-10-19","Type":"Other","Title":"Modified"}]}}}