Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-6jmw-6mxw-w4jc: BER/CER/DER decoder panics on invalid input

NLnet Labs’ bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.

ghsa
#git

BER/CER/DER decoder panics on invalid input

High severity GitHub Reviewed Published Sep 13, 2023 to the GitHub Advisory Database • Updated Sep 14, 2023

Related news

CVE-2023-39914

NLnet Labs’ bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.