nanog mailing list archives

Re: Fwd: [ PRIVACY Forum ] Critical bug threatens to bite mobile phones and networks


From: Michael Thomas <mike () mtcc com>
Date: Tue, 19 Jul 2016 17:13:50 -0700

On 07/19/2016 04:55 PM, Jay R. Ashworth wrote:
Heap overflow bug in either a widely used ASN.1 library from Objective Systems,
apparently popular with cell-radio industry people.  Not sure if this will
leak over into NANOG land -- but neither are you, and that's most of my point.

DO *you* know if this library is used in your routers?  Can you find out?

How easily and quickly?

Friends don't let friends use asn.1

Mike


Current thread: