The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gnutlsUpgrade gnutls-develUpgrade libtasn1Upgrade libtasn1-toolsUpgrade libtasn1-develUpgrade gnutls-utils | Dec 1, 2016 | Mar 26, 2012 |
| Freebsd | — | Upgrade libtasn1Upgrade gnutls-develUpgrade gnutls | Dec 10, 2025 | Mar 21, 2012 |
| Gentoo Linux | — | Upgrade dev-libs/libtasn1. | Oct 30, 2017 | Mar 26, 2012 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 26, 2012 |
| Oracle_linux | — | Upgrade libtasn1-develUpgrade libtasn1Upgrade libtasn1-tools | Oct 16, 2024 | Mar 26, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 19, 2012 |
| Suse | — | Upgrade libgnutls26-x86Upgrade gnutlsUpgrade libgnutls-dane0Upgrade libgnutls26Upgrade libgnutls-openssl-develUpgrade libgnutls-extra26Upgrade libgnutls-extra-develUpgrade libgnutlsxx-develUpgrade libgnutls30-32bitUpgrade libgnutls30Upgrade libgnutlsxx28Upgrade libgnutlsxx30Upgrade libgnutls-develUpgrade libgnutls28-32bitUpgrade libgnutls-devel-docUpgrade libgnutls-openssl27Upgrade libgnutls28Upgrade libgnutls26-32bit | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libtasn1-3 | Nov 8, 2024 | Mar 26, 2012 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.0 to build number 787047Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Mar 26, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub