CVE-2024-12133

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-12133
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-12133.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-12133
Downstream
ALPINE (1)
AZL (4)
BELL (1)
CLSA (2)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (2)
RHSA (7)
RLSA (2)
SUSE (4)
UBUNTU (1)
Related
ALSA (2)
openSUSE (2)
SUSE (4)
Published
2025-02-10T15:28:03Z
Modified
2026-10-23T10:30:27Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
Details

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

Database specific 
{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-407"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12133.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "0:4.13-5.el8_10"
                        },
                        {
                            "fixed":  "0:4.13-5.el8_10"
                        },
                        {
                            "fixed":  "0:3.6.14-10.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_4.1"
                        },
                        {
                            "fixed":  "0:3.6.14-10.el8_4.1"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_4.1"
                        },
                        {
                            "fixed":  "0:3.6.16-5.el8_6.5"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_6.2"
                        },
                        {
                            "fixed":  "0:3.6.16-5.el8_6.5"
                        },
                        {
                            "fixed":  "0:4.13-3.el8_6.2"
                        },
                        {
                            "fixed":  "0:3.6.16-7.el8_8.4"
                        },
                        {
                            "fixed":  "0:4.13-4.el8_8.1"
                        },
                        {
                            "fixed":  "0:3.6.16-7.el8_8.4"
                        },
                        {
                            "fixed":  "0:4.13-4.el8_8.1"
                        },
                        {
                            "fixed":  "0:4.16.0-9.el9"
                        },
                        {
                            "fixed":  "0:4.16.0-9.el9"
                        },
                        {
                            "fixed":  "0:4.16.0-8.el9_2.1"
                        },
                        {
                            "fixed":  "0:4.16.0-8.el9_4.1"
                        },
                        {
                            "fixed":  "1.14.3-1748529279"
                        },
                        {
                            "fixed":  "1.14.2-1748467619"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "InverseAffectedRanges"
                }
            ]
        }
    ]
}
References

Affected packages

Git / gitlab.com/gnutls/libtasn1

Affected ranges

Type
GIT
Repo
https://gitlab.com/gnutls/libtasn1
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
6b45b25e94ea538192cc0f97e9ad57171d1c6374
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "4.20.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Affected versions

4.*
4.16.0
Other
gnutls_0_5_0
gnutls_0_5_1
libasn1_0_1_0
libtasn1-0-3-2
libtasn1_0_1_2
libtasn1_0_2_0
libtasn1_0_2_1
libtasn1_0_2_10
libtasn1_0_2_11
libtasn1_0_2_12
libtasn1_0_2_13
libtasn1_0_2_14
libtasn1_0_2_15
libtasn1_0_2_16
libtasn1_0_2_17
libtasn1_0_2_18
libtasn1_0_2_2
libtasn1_0_2_3
libtasn1_0_2_4
libtasn1_0_2_5
libtasn1_0_2_6
libtasn1_0_2_7
libtasn1_0_2_8
libtasn1_0_2_9
libtasn1_0_3_0
libtasn1_0_3_1
libtasn1_0_3_10
libtasn1_0_3_2
libtasn1_0_3_3
libtasn1_0_3_4
libtasn1_0_3_5
libtasn1_0_3_6
libtasn1_0_3_7
libtasn1_0_3_8
libtasn1_0_3_9
libtasn1_1_0
libtasn1_1_1
libtasn1_1_2
libtasn1_1_3
libtasn1_1_4
libtasn1_1_5
libtasn1_1_6
libtasn1_2_0
libtasn1_2_1
libtasn1_2_10
libtasn1_2_11
libtasn1_2_12
libtasn1_2_13
libtasn1_2_2
libtasn1_2_3
libtasn1_2_4
libtasn1_2_5
libtasn1_2_6
libtasn1_2_7
libtasn1_2_8
libtasn1_2_9
libtasn1_3_0
libtasn1_3_1
libtasn1_3_2
libtasn1_3_3
libtasn1_3_4
libtasn1_3_5
libtasn1_3_6
libtasn1_4_0
libtasn1_4_1
libtasn1_4_11
libtasn1_4_12
libtasn1_4_13
libtasn1_4_14
libtasn1_4_15_0
libtasn1_4_16_0
libtasn1_4_2
libtasn1_4_3
libtasn1_4_4
libtasn1_4_5
libtasn1_4_6
libtasn1_4_8
libtasn1_4_9
libtasn1_after_rename
libtasn1_4.*
libtasn1_4.7
v4.*
v4.16.0
v4.17.0
v4.18.0
v4.19.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-12133.json"