Summary
Bing Shi discovered that Libtasn1 inefficiently handled certificates. An
attacker could possibly use this issue to increase resource utilization
leading to a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libtasn1-6 | 4.16.0-2ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | libtasn1-6 | 4.18.0-4ubuntu0.1 |
Vulnerabilities 1
-
Medium 5.3
Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to s…
References
-
report
https://ubuntu.com/security/CVE-2024-12133