libtasn1 vulnerabilities
3 known CVE vulnerabilities in libtasn1, translated and rated.
- CVE-2015-2806High
A stack-based buffer overflow in asn1_der_decoding in libtasn1 before version 4.4 allows remote attackers to have unspecified impact.
- CVE-2024-12243Medium
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption.
- CVE-2024-12133Medium
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.