CVE-2024-12243
MediumSummary
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption.
Risk Assessment
A remote attacker can send a crafted certificate, causing excessive CPU usage and potentially leading to a denial of service (DoS).
Recommendation
Update libtasn1 to a version with a more efficient DER decoding algorithm to prevent excessive resource consumption.
Original NVD description (English source)
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafte