CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10013

The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted certificate in the TLS certificate handshake message, because the result of get_asn1_length() is not checked for a minimum or maximum size.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 77.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 7.8

References

Products affected by CVE-2019-10013

Axtls Project » Axtls » Version: 1.4.2

cpe:2.3:a:axtls_project:axtls:1.4.2
Axtls Project » Axtls » Version: 1.4.3

cpe:2.3:a:axtls_project:axtls:1.4.3
Axtls Project » Axtls » Version: 1.4.4

cpe:2.3:a:axtls_project:axtls:1.4.4
Axtls Project » Axtls » Version: 1.4.5

cpe:2.3:a:axtls_project:axtls:1.4.5
Axtls Project » Axtls » Version: 1.4.6

cpe:2.3:a:axtls_project:axtls:1.4.6
Axtls Project » Axtls » Version: 1.4.8

cpe:2.3:a:axtls_project:axtls:1.4.8
Axtls Project » Axtls » Version: 1.4.9

cpe:2.3:a:axtls_project:axtls:1.4.9
Axtls Project » Axtls » Version: 1.5.0

cpe:2.3:a:axtls_project:axtls:1.5.0
Axtls Project » Axtls » Version: 1.5.1

cpe:2.3:a:axtls_project:axtls:1.5.1
Axtls Project » Axtls » Version: 1.5.2

cpe:2.3:a:axtls_project:axtls:1.5.2
Axtls Project » Axtls » Version: 1.5.3

cpe:2.3:a:axtls_project:axtls:1.5.3
Axtls Project » Axtls » Version: 1.5.4

cpe:2.3:a:axtls_project:axtls:1.5.4
Axtls Project » Axtls » Version: 2.0.0

cpe:2.3:a:axtls_project:axtls:2.0.0
Axtls Project » Axtls » Version: 2.0.1

cpe:2.3:a:axtls_project:axtls:2.0.1
Axtls Project » Axtls » Version: 2.1.0

cpe:2.3:a:axtls_project:axtls:2.1.0
Axtls Project » Axtls » Version: 2.1.1

cpe:2.3:a:axtls_project:axtls:2.1.1
Axtls Project » Axtls » Version: 2.1.2

cpe:2.3:a:axtls_project:axtls:2.1.2
Axtls Project » Axtls » Version: 2.1.3

cpe:2.3:a:axtls_project:axtls:2.1.3
Axtls Project » Axtls » Version: 2.1.4

cpe:2.3:a:axtls_project:axtls:2.1.4
Axtls Project » Axtls » Version: 2.1.5

cpe:2.3:a:axtls_project:axtls:2.1.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10013

Products

Pricing

Contact Us