Summary
Bing Shi discovered that GnuTLS incorrectly handled decoding certain
DER-encoded certificates. A remote attacker could possibly use this issue
to cause GnuTLS to consume resources, leading to a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | gnutls28 | 3.6.13-2ubuntu1.12 |
| Ubuntu · 22.04 LTS 22.04:LTS | gnutls28 | 3.7.3-4ubuntu1.6 |
| Ubuntu · 24.04 LTS 24.04:LTS | gnutls28 | 3.8.3-1.1ubuntu3.3 |
Vulnerabilities 1
-
Medium 5.3
Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a r…
References
-
report
https://ubuntu.com/security/CVE-2024-12243