It was found that indefinite string encoding is decoded via recursion in _asn1_decode_simple_ber() which can lead to stack exhaustion when processing specially crafted string.
Created libtasn1 tracking bugs for this issue:
Affects: fedora-all [bug 1535926]
Created mingw-libtasn1 tracking bugs for this issue:
Affects: fedora-all [bug 1535925]
This issue affects the versions of libtasn1 as shipped with Red Hat Satellite version 6. Red Hat Product Security has rated this issue as having Moderate security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.