Fwd: [ PRIVACY Forum ] Critical bug threatens to bite mobile phones and networks

Michael Thomas mike at mtcc.com
Wed Jul 20 00:13:50 UTC 2016


On 07/19/2016 04:55 PM, Jay R. Ashworth wrote:
> Heap overflow bug in either a widely used ASN.1 library from Objective Systems,
> apparently popular with cell-radio industry people.  Not sure if this will
> leak over into NANOG land -- but neither are you, and that's most of my point.
>
> DO *you* know if this library is used in your routers?  Can you find out?
>
> How easily and quickly?

Friends don't let friends use asn.1

Mike




More information about the NANOG mailing list