A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtasn1-develUpgrade libtasn1-toolsUpgrade libtasn1 | Jul 4, 2025 | Feb 10, 2025 |
| Alpine Linux | — | Upgrade libtasn1 | Aug 8, 2025 | Feb 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libtasn1-debuginfoUpgrade libtasn1-toolsUpgrade libtasn1-develUpgrade libtasn1 | Jun 13, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade libtasn1-develUpgrade libtasn1-tools-debuginfoUpgrade libtasn1-toolsUpgrade libtasn1-debuginfoUpgrade libtasn1-debugsourceUpgrade libtasn1 | Jun 3, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade libtasn1-6 | Feb 12, 2025 | Feb 10, 2025 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libtasn1 | May 13, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libtasn1 | Apr 11, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libtasn1 | May 7, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libtasn1 | Apr 1, 2025 | Feb 10, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade libtasn1Upgrade libtasn1-develUpgrade libtasn1-tools | Apr 23, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade libtasn1-toolsUpgrade libtasn1Upgrade libtasn1-debugsourceUpgrade libtasn1-debuginfoUpgrade libtasn1-tools-debuginfoUpgrade libtasn1-develNo solution exists | Apr 24, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade libtasn1-toolsUpgrade libtasn1Upgrade libtasn1-develUpgrade libtasn1-debuginfoUpgrade libtasn1-debugsourceUpgrade libtasn1-tools-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade libgnutls-develUpgrade libtasn1Upgrade gnutlsUpgrade libgnutlsxx30Upgrade libtasn1-develUpgrade libgnutlsxx-develUpgrade libtasn1-6Upgrade libgnutls30Upgrade libtasn1-devel-32bitUpgrade libtasn1-6-32bitUpgrade libtasn1-tools | Dec 5, 2025 | Apr 24, 2025 |
| Ubuntu | — | Upgrade libtasn1-binUpgrade libtasn1-6 | Feb 20, 2025 | Feb 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub