CVE-2015-3622Libtasn1 Memory Corruption
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
Published May 12, 2015 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2015-3622, DSA-3256-1, SUSE-SU-2015:1518-1, SUSE-SU-2016:1600-1, SUSE-SU-2016:1601-1, UBUNTU-CVE-2015-3622, USN-2604-1
Key Facts
Routine patching- CVE-2015-3622 is a medium-severity vulnerability (CVSS 5.9 v3.1) affecting Libtasn1 (Gnu), Fedora (Fedoraproject), Opensuse and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 33% probability of exploitation in the next 30 days.
- Fixed versions are available, including Libtasn1 4.4, Libtasn1 0:4.10-1.el7, Libtasn1 1.5-1.34.1.
- Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
Scores
CVSS v3.1
5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS (30-day exploit likelihood)
33%
Higher than 98.3% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
37/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
1
Reports of active use
Advisories And Exploit References
- advisoryhttps://security-tracker.debian.org/tracker/CVE-2015-3622
- advisoryhttps://ubuntu.com/security/CVE-2015-3622
- advisoryhttps://www.cve.org/CVERecord?id=CVE-2015-3622
- advisoryRHSA-2017:1860
- advisoryhttps://blog.fuzzing-project.org/9-Heap-overflow-invalid-read-in-Libtasn1-TFPA-0052015.html
- advisoryhttps://bugzilla.suse.com/929414
Description
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
Affected Products
106 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Libtasn1Gnu | See advisory | 4.4 |
| FedoraFedoraproject | 21 | n/a |
| OpensuseOpensuse | 13.2 | n/a |
| libtasn1-6debian | See advisory | 4.4-3 |
| rootio-libtasn1-6rootio | See advisory | 4.4-3 |
Patched Releases
Libtasn1
4.4, 0:4.10-1.el7, 1.5-1.34.1, 3.7-11.1, 3.7-12.1, 3.7-2.7.1, 4.10-1.el7, 4.10-1.el7+sp999, 4.13-4.el8_7+sp999, 4.9-1.3
gnutls
3.2.15-11.1
libgnutls-devel
3.2.15-11.1
libgnutls-openssl-devel
3.2.15-11.1
libgnutls-openssl27
3.2.15-11.1
libgnutls28
3.2.15-11.1
libgnutls28-32bit
3.2.15-11.1
libgnutlsxx-devel
3.2.15-11.1
libgnutlsxx28
3.2.15-11.1
libtasn1-3
1.5-1.34.1
libtasn1-3-32bit
1.5-1.34.1
libtasn1-3-x86
1.5-1.34.1
libtasn1-6
3.4-3ubuntu0.3, 3.7-11.1, 3.7-12.1, 3.7-2.7.1, 4.2-3+deb8u1, 4.4-3, 4.9-1.3
libtasn1-6-32bit
3.7-11.1, 3.7-12.1, 3.7-2.7.1, 4.9-1.3
libtasn1-6-debuginfo
3.7-2.7.1
libtasn1-6-debuginfo-32bit
3.7-2.7.1
libtasn1-debuginfo
3.7-2.7.1
libtasn1-debugsource
3.7-2.7.1
libtasn1-devel
1.5-1.34.1, 3.7-11.1, 3.7-12.1, 3.7-2.7.1, 4.10-1.el7, 4.9-1.3
libtasn1-devel-32bit
3.7-12.1, 3.7-2.7.1, 4.9-1.3
libtasn1-tools
4.10-1.el7
rootio-libtasn1-6
4.4-3
seal-libtasn1
4.10-1.el7+sp999, 4.13-4.el8_7+sp999
sles12-docker-image
1.1.4-20171002
sles12sp1-docker-image
1.0.7-20171002
Timeline
Publicly disclosed
May 12, 2015
Last updated
Aug 4, 2026
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-122 Heap-based Buffer Overflow
References
- advisorysecurity-tracker.debian.org · CVE-2015-3622
- advisoryubuntu.com · CVE-2015-3622
- advisorycve.org · CVERecord
- advisoryRHSA-2017:1860
- advisoryblog.fuzzing-project.org · 9-Heap-overflow-invalid-read-in-Libtasn1-TFPA-0…
FAQ
Common Questions.
The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.
Affected: Libtasn1 (Gnu); Fedora (Fedoraproject) versions 21; Opensuse versions 13.2, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Libtasn1 4.4, Libtasn1 0:4.10-1.el7, Libtasn1 1.5-1.34.1.
Brandefense priority: routine patching, as no exploitation is known and its severity is moderate or low.
Is CVE-2015-3622 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo