Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtasn1-develUpgrade libtasn1-toolsUpgrade libtasn1 | Jun 25, 2026 | Jun 23, 2026 |
| Alpine Linux | — | Upgrade libtasn1 | Jan 13, 2026 | Jan 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libtasn1-debuginfoUpgrade libtasn1-toolsUpgrade libtasn1-develUpgrade libtasn1 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libtasn1-toolsUpgrade libtasn1-tools-debuginfoUpgrade libtasn1-debuginfoUpgrade libtasn1-develUpgrade libtasn1-debugsourceUpgrade libtasn1 | Feb 10, 2026 | Jan 7, 2026 |
| Debian | — | Upgrade libtasn1-6 | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade libtasn1 | Jan 27, 2026 | Jan 11, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtasn1 | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libtasn1 | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libtasn1 | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade libtasn1-debuginfoNo solution existsUpgrade libtasn1Upgrade libtasn1-toolsUpgrade libtasn1-debugsourceUpgrade libtasn1-tools-debuginfoUpgrade libtasn1-devel | Jun 25, 2026 | Jan 7, 2026 |
| Rocky_linux | — | Upgrade libtasn1-develUpgrade libtasn1-debuginfoUpgrade libtasn1-tools-debuginfoUpgrade libtasn1Upgrade libtasn1-debugsourceUpgrade libtasn1-tools | Jun 29, 2026 | Jun 24, 2026 |
| Ubuntu | — | Upgrade libtasn1-6 (Ubuntu Pro)Upgrade libtasn1-6 | Jan 13, 2026 | Jan 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub