CVE-2024-12243
MediumSummary
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption.
Risk Assessment
A remote attacker can send a crafted certificate, causing excessive CPU usage and potentially leading to a denial of service (DoS).
Recommendation
Update libtasn1 to a version with a more efficient DER decoding algorithm to prevent excessive resource consumption.
Other vulnerabilities in libtasn1
See all- CVE-2015-2806High
A stack-based buffer overflow in asn1_der_decoding in libtasn1 before version 4.4 allows remote attackers to have unspecified impact.
- CVE-2024-12133Medium
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
Original NVD description (English source)
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafte
Vulnerability data from NVD (NIST) · CISA KEV · EPSS