A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libtasn1alma-upgrade-libtasn1-develalma-upgrade-libtasn1-tools | Jul 4, 2025 | Feb 10, 2025 | |
| Alpine Linux | alpine-linux-upgrade-libtasn1 | Aug 8, 2025 | Feb 10, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libtasn1amazon-linux-ami-2-upgrade-libtasn1-debuginfoamazon-linux-ami-2-upgrade-libtasn1-develamazon-linux-ami-2-upgrade-libtasn1-tools | Jun 13, 2025 | Feb 10, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libtasn1amazon-linux-2023-upgrade-libtasn1-debuginfoamazon-linux-2023-upgrade-libtasn1-debugsourceamazon-linux-2023-upgrade-libtasn1-develamazon-linux-2023-upgrade-libtasn1-toolsamazon-linux-2023-upgrade-libtasn1-tools-debuginfo | Jun 3, 2025 | Feb 10, 2025 | |
| Debian | debian-upgrade-libtasn1-6 | Feb 12, 2025 | Feb 10, 2025 | |
| Dell Powerstore Dsa2025223 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | May 27, 2025 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Dell Powerstore Dsa2026039 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Jan 6, 2026 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libtasn1 | May 13, 2025 | Feb 10, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libtasn1 | Apr 11, 2025 | Feb 10, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libtasn1 | May 7, 2025 | Feb 10, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-libtasn1 | Apr 1, 2025 | Feb 10, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Aug 22, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-libtasn1oracle-linux-upgrade-libtasn1-develoracle-linux-upgrade-libtasn1-tools | Apr 23, 2025 | Feb 10, 2025 |
| Redhat_linux | redhat-upgrade-libtasn1redhat-upgrade-libtasn1-debuginforedhat-upgrade-libtasn1-debugsourceredhat-upgrade-libtasn1-develredhat-upgrade-libtasn1-toolsredhat-upgrade-libtasn1-tools-debuginfo | Apr 24, 2025 | Feb 10, 2025 | |
| Rocky_linux | rocky-upgrade-libtasn1rocky-upgrade-libtasn1-debuginforocky-upgrade-libtasn1-debugsourcerocky-upgrade-libtasn1-develrocky-upgrade-libtasn1-toolsrocky-upgrade-libtasn1-tools-debuginfo | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-gnutlssuse-upgrade-libgnutls-develsuse-upgrade-libgnutls30suse-upgrade-libgnutlsxx-develsuse-upgrade-libgnutlsxx30suse-upgrade-libtasn1suse-upgrade-libtasn1-6suse-upgrade-libtasn1-6-32bitsuse-upgrade-libtasn1-develsuse-upgrade-libtasn1-devel-32bitsuse-upgrade-libtasn1-tools | Dec 5, 2025 | Apr 24, 2025 |
| Ubuntu | ubuntu-upgrade-libtasn1-6ubuntu-upgrade-libtasn1-bin | Feb 20, 2025 | Feb 10, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub