[190679] in North American Network Operators' Group
Re: Fwd: [ PRIVACY Forum ] Critical bug threatens to bite mobile
daemon@ATHENA.MIT.EDU (Michael Thomas)
Tue Jul 19 20:13:56 2016
X-Original-To: nanog@nanog.org
To: nanog@nanog.org
From: Michael Thomas <mike@mtcc.com>
Date: Tue, 19 Jul 2016 17:13:50 -0700
In-Reply-To: <1968751399.18964.1468972540060.JavaMail.zimbra@baylink.com>
Errors-To: nanog-bounces@nanog.org
On 07/19/2016 04:55 PM, Jay R. Ashworth wrote:
> Heap overflow bug in either a widely used ASN.1 library from Objective Systems,
> apparently popular with cell-radio industry people. Not sure if this will
> leak over into NANOG land -- but neither are you, and that's most of my point.
>
> DO *you* know if this library is used in your routers? Can you find out?
>
> How easily and quickly?
Friends don't let friends use asn.1
Mike
