Bug#956186: libconvert-asn1-perl: CVE-2013-7488: allows remote attackers to cause an infinite loop via unexpected input

[Salvatore Bonaccorso]

Source: libconvert-asn1-perl
Version: 0.27-2
Severity: important
Tags: security upstream
Forwarded: https://github.com/gbarr/perl-Convert-ASN1/issues/14

Hi,

The following vulnerability was published for libconvert-asn1-perl.

CVE-2013-7488[0]:
| perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27
| allows remote attackers to cause an infinite loop via unexpected
| input.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2013-7488
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7488
[1] https://github.com/gbarr/perl-Convert-ASN1/issues/14

Regards,
Salvatore