🕵️ GNU Libtasn1 3.0 up to 3.5 lib/element.c null pointer dereference

A vulnerability was found in GNU Libtasn1 3.0 up to 3.5 and classified as problematic. This issue affects the function asn1_write_value/asn1_read_value_type/_asn1_convert_integer in the library lib/element.c. Upgrading to version 3.6 eliminates this vulnerability. The upgrade is hosted for download at ftp.gnu.org. Applying a patch is able to eliminate this problem. The best possible mitigation is suggested to be patching the affected component. A possible mitigation has been published immediately after the disclosure of the vulnerability. ...