CVE-2013-7488
perl-Convert-ASN1: Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules. Security Fix(es): * perl-Convert-ASN1:...
CVE-2013-7488 is fixed in perl-Convert-ASN1 on 1 platform, first by RHSA-2024:3049, released May 22, 2024. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0415
90th percentile
Convert::ASN1 encodes and decodes ASN.1 data structures using BER/DER rules. Security Fix(es): * perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input (CVE-2013-7488) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| perl-Convert-ASN1 · RHEL 8 | 0:0.27-18.el8 | RHSA-2024:3049 | May 22, 2024 |
| perl-Convert-ASN1 · almalinux 8 | 0.27-18.el8 | ALSA-2024:3049 | May 22, 2024 |
| perl-Convert-ASN1 · ol 8 | 0:0.27-18.el8 | ELSA-2024-3049 | May 23, 2024 |
| perl-Convert-ASN1 · rocky 8 | 0:0.27-18.el8 | RLSA-2024:3049 | Jun 14, 2024 |