[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWlOhQGoI6TuDnMS9euMOKgKW0__mrKhImSdHG0BZv6k":3,"g5a-risk:CVE-2016-4008":231},{"success":4,"data":5,"meta":229},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":76,"references":77,"referencesCount":150,"weaknesses":151,"weaknessesCount":155,"isActivelyExploited":156,"cisaInfo":15,"otxData":15,"relatedBlogPosts":157,"seoMetadata":158,"configurations":183,"relatedVendorCves":220,"notableEvents":221},"CVE-2016-4008","What is CVE-2016-4008?","The _asn1_extract_der_octet function in lib\u002Fdecoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a crafted certificate.","The _asn1_extract_der_octet function in lib\u002Fdecoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote atta...","2016-05-05T18:59:10.38","2025-04-12T10:46:40.837",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",4.3,8.6,2.9,0.29405,[38,38,38,38,38,38,38],"Medium",[42,47,50,53,56,60,65,70,73],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":43,"product":44,"version":51,"criteria":52,"vulnerable":4},"15.10","cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":54,"criteria":55,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":57,"product":57,"version":58,"criteria":59,"vulnerable":4},"opensuse","13.2","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"gnu","libtasn1","*","cpe:2.3:a:gnu:libtasn1:*:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":68,"criteria":69,"vulnerable":4},"fedoraproject","fedora","22","cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":71,"criteria":72,"vulnerable":4},"23","cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":74,"criteria":75,"vulnerable":4},"24","cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",9,[78,82,85,89,92,95,99,102,106,110,114,117,120,124,126,128,130,132,134,136,138,140,142,144,146,148],{"url":79,"source":80,"tags":81},"http:\u002F\u002Fgit.savannah.gnu.org\u002Fgitweb\u002F?p=libtasn1.git%3Ba=commit%3Bh=a6e0a0b58f5cdaf4e9beca5bce69c09808cbb625","Gnu",[],{"url":83,"source":80,"tags":84},"http:\u002F\u002Fgit.savannah.gnu.org\u002Fgitweb\u002F?p=libtasn1.git%3Ba=commit%3Bh=f435825c0f527a8e52e6ffbc3ad0bc60531d537e",[],{"url":86,"source":87,"tags":88},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-April\u002F182299.html","Fedoraproject",[],{"url":90,"source":87,"tags":91},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-April\u002F182907.html",[],{"url":93,"source":87,"tags":94},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-April\u002F183221.html",[],{"url":96,"source":97,"tags":98},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2016-06\u002Fmsg00047.html","Opensuse",[],{"url":100,"source":97,"tags":101},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2016-06\u002Fmsg00097.html",[],{"url":103,"source":104,"tags":105},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3568","Debian",[],{"url":107,"source":108,"tags":109},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F04\u002F11\u002F3","Openwall",[],{"url":111,"source":112,"tags":113},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2957-1","Ubuntu",[],{"url":115,"source":112,"tags":116},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2957-2",[],{"url":118,"source":80,"tags":119},"https:\u002F\u002Flists.gnu.org\u002Farchive\u002Fhtml\u002Fhelp-libtasn1\u002F2016-04\u002Fmsg00009.html",[],{"url":121,"source":122,"tags":123},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201703-05","Gentoo",[],{"url":79,"source":80,"tags":125},[],{"url":83,"source":80,"tags":127},[],{"url":86,"source":87,"tags":129},[],{"url":90,"source":87,"tags":131},[],{"url":93,"source":87,"tags":133},[],{"url":96,"source":97,"tags":135},[],{"url":100,"source":97,"tags":137},[],{"url":103,"source":104,"tags":139},[],{"url":107,"source":108,"tags":141},[],{"url":111,"source":112,"tags":143},[],{"url":115,"source":112,"tags":145},[],{"url":118,"source":80,"tags":147},[],{"url":121,"source":122,"tags":149},[],26,[152],{"id":153,"name":153,"description":154},"Unknown","CWE-399",1,false,[],{"title":159,"metaDescription":160,"keywords":161,"canonicalUrl":162,"structuredData":163},"What is CVE-2016-4008? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-4008, a medium severity cyber security vulnerability from 2016. The _asn1_extract_der_octet function in lib\u002Fdecoding.c in ...","CVE-2016-4008, CVE-2016-4008 vulnerability, CVE-2016-4008 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, canonical security, opensuse security, gnu security, fedoraproject security, ubuntu_linux vulnerability, opensuse vulnerability, libtasn1 vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2016-4008",{"@context":164,"@type":165,"headline":159,"description":160,"datePublished":10,"dateModified":11,"author":166,"publisher":170,"about":174,"mainEntityOfPage":178,"articleSection":181,"keywords":182},"https:\u002F\u002Fschema.org","TechArticle",{"@type":167,"name":168,"url":169},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":167,"name":168,"url":169,"logo":171},{"@type":172,"url":173},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":175,"name":6,"description":176,"additionalType":177},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":179,"@id":180},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-4008","Cybersecurity","CVE-2016-4008, CVE-2016-4008 vulnerability, CVE-2016-4008 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[184,197,203,210],{"Operator":15,"Negate":15,"Nodes":185},[186],{"Operator":187,"Negate":15,"CPEMatch":188},"OR",[189,191,193,195],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E88A537F-F4D0-46B9-9E37-965233C2A355",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":196,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Operator":15,"Negate":15,"Nodes":198},[199],{"Operator":187,"Negate":15,"CPEMatch":200},[201],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":202,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"03117DF1-3BEC-4B8D-AD63-DBBDB2126081",{"Operator":15,"Negate":15,"Nodes":204},[205],{"Operator":187,"Negate":15,"CPEMatch":206},[207],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":208,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":209},"7838BCC2-1E49-4595-B3FE-17A4EFF4A1CD","4.7",{"Operator":15,"Negate":15,"Nodes":211},[212],{"Operator":187,"Negate":15,"CPEMatch":213},[214,216,218],{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":215,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"253C303A-E577-4488-93E6-68A8DD942C38",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":217,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E79AB8DD-C907-4038-A931-1A5A4CFB6A5B",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C",[],[222],{"id":223,"eventType":224,"eventTime":225,"details":226,"label":227,"color":228},"79f3b351-3620-44d8-b012-1cd0389adec6","HIGH_EPSS_DELTA","2026-06-16T04:06:31.73803+00:00","Daily EPSS score increased by 0.253 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":230,"version":32},1792349757897,{"score":232,"band":233,"action":234,"scoredAt":235},32,"Low","Monitor","2026-10-17T07:56:57.451965+00:00"]