CVE-2014-3469

CVE-2014-3469 is a denial-of-service vulnerability affecting GNU Libtasn1 versions prior to 3.6, specifically within the asn1_read_value_type and asn1_read_value functions. This flaw, present in products from Debian, GNU, Red Hat, and SUSE, allows an unauthenticated attacker to cause a NULL pointer dereference and crash by providing a NULL value in the ivalue argument. With a CVSS score of 5.0, it is considered a medium-severity vulnerability with low attack complexity, requiring no authentication, and primarily impacting availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat landscape.