GNUTLS LibTASN1 DER Decoding Denial of Service Vulnerabilities

GNUTLS LibTASN1 DER Decoding Denial of Service Vulnerabilities

Example code designed to trigger these issues is available as a regression test file and is provided from the vendor at the following URI:

http://josefsson.org/cgi-bin/viewcvs.cgi/gnutls/tests/certder.c?view=markup

The ProtoVer SSL Testsuite from http://www.gleg.net/protover_ssl.shtml may also be used to trigger these issues.