Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-12133

Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libtasn1

Default version status: unaffected

  • 0 to < 4.20.0affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.13-5.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.13-5.el8_10 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 0:3.6.14-10.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 0:4.13-3.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Default version status: affected

  • 0:3.6.14-10.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Default version status: affected

  • 0:4.13-3.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 0:3.6.16-5.el8_6.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Default version status: affected

  • 0:4.13-3.el8_6.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Default version status: affected

  • 0:3.6.16-5.el8_6.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Default version status: affected

  • 0:4.13-3.el8_6.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Default version status: affected

  • 0:3.6.16-7.el8_8.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Default version status: affected

  • 0:4.13-4.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Default version status: affected

  • 0:3.6.16-7.el8_8.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Default version status: affected

  • 0:4.13-4.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:4.16.0-9.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:4.16.0-9.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Default version status: affected

  • 0:4.16.0-8.el9_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Default version status: affected

  • 0:4.16.0-8.el9_4.1 to < *unaffected

Red Hat Red Hat Discovery 1.14

Default version status: affected

  • 1.14.3-1748529279 to < *unaffected

Red Hat Red Hat Discovery 1.14

Default version status: affected

  • 1.14.2-1748467619 to < *unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References