UBUNTU-CVE-2024-12243
- Source
- https://ubuntu.com/security/CVE-2024-12243
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-12243.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-12243
- Upstream
- Downstream
- Related
- Published
- 2025-02-10T16:15:00Z
- Modified
- 2026-07-06T20:44:27.631542313Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
- References
-
- https://ubuntu.com/security/CVE-2024-12243
- https://www.cve.org/CVERecord?id=CVE-2024-12243
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-02-07
- https://lists.gnupg.org/pipermail/gnutls-help/2025-February/004875.html
- https://access.redhat.com/security/cve/CVE-2024-12243
- https://ubuntu.com/security/notices/USN-7281-1
- https://ubuntu.com/security/notices/USN-8502-1
Affected packages
Ubuntu:20.04:LTS
gnutls28
Package
- Name
- gnutls28
- Purl
- pkg:deb/ubuntu/gnutls28?arch=source&distro=focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.6.13-2ubuntu1.12
Affected versions
3.*
3.6.9-5ubuntu1
3.6.9-5ubuntu2
3.6.10-5
3.6.11.1-2
3.6.11.1-2ubuntu2
3.6.13-2ubuntu1
3.6.13-2ubuntu1.1
3.6.13-2ubuntu1.2
3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.10
3.6.13-2ubuntu1.11
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "3.6.13-2ubuntu1.12",
"binary_name": "gnutls-bin"
},
{
"binary_version": "3.6.13-2ubuntu1.12",
"binary_name": "guile-gnutls"
},
{
"binary_version": "3.6.13-2ubuntu1.12",
"binary_name": "libgnutls-dane0"
},
{
"binary_version": "3.6.13-2ubuntu1.12",
"binary_name": "libgnutls-openssl27"
},
{
"binary_version": "3.6.13-2ubuntu1.12",
"binary_name": "libgnutls30"
},
{
"binary_version": "3.6.13-2ubuntu1.12",
"binary_name": "libgnutlsxx28"
}
]
}Ubuntu:22.04:LTS
gnutls28
Package
- Name
- gnutls28
- Purl
- pkg:deb/ubuntu/gnutls28?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.7.3-4ubuntu1.6
Affected versions
3.*
3.7.1-5ubuntu1
3.7.2-2ubuntu1
3.7.2-4ubuntu1
3.7.2-5ubuntu1
3.7.3-4ubuntu1
3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.5
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.7.3-4ubuntu1.6",
"binary_name": "gnutls-bin"
},
{
"binary_version": "3.7.3-4ubuntu1.6",
"binary_name": "guile-gnutls"
},
{
"binary_version": "3.7.3-4ubuntu1.6",
"binary_name": "libgnutls-dane0"
},
{
"binary_version": "3.7.3-4ubuntu1.6",
"binary_name": "libgnutls-openssl27"
},
{
"binary_version": "3.7.3-4ubuntu1.6",
"binary_name": "libgnutls30"
},
{
"binary_version": "3.7.3-4ubuntu1.6",
"binary_name": "libgnutlsxx28"
}
],
"availability": "No subscription required"
}Ubuntu:24.04:LTS
gnutls28
Package
- Name
- gnutls28
- Purl
- pkg:deb/ubuntu/gnutls28?arch=source&distro=noble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.8.3-1.1ubuntu3.3
Affected versions
3.*
3.8.1-4ubuntu1
3.8.1-4ubuntu6
3.8.1-4ubuntu7
3.8.3-1ubuntu1
3.8.3-1.1ubuntu2
3.8.3-1.1ubuntu3
3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.2
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "3.8.3-1.1ubuntu3.3",
"binary_name": "gnutls-bin"
},
{
"binary_version": "3.8.3-1.1ubuntu3.3",
"binary_name": "libgnutls-dane0t64"
},
{
"binary_version": "3.8.3-1.1ubuntu3.3",
"binary_name": "libgnutls-openssl27t64"
},
{
"binary_version": "3.8.3-1.1ubuntu3.3",
"binary_name": "libgnutls30t64"
}
]
}Ubuntu:Pro:18.04:LTS
gnutls28
Package
- Name
- gnutls28
- Purl
- pkg:deb/ubuntu/gnutls28?arch=source&distro=esm-infra%2Fbionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.5.18-1ubuntu1.6+esm3
Affected versions
3.*
3.5.8-6ubuntu3
3.5.17-1ubuntu1
3.5.17-1ubuntu3
3.5.18-1ubuntu1
3.5.18-1ubuntu1.1
3.5.18-1ubuntu1.2
3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm1
3.5.18-1ubuntu1.6+esm2
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.5.18-1ubuntu1.6+esm3",
"binary_name": "gnutls-bin"
},
{
"binary_version": "3.5.18-1ubuntu1.6+esm3",
"binary_name": "libgnutls-dane0"
},
{
"binary_version": "3.5.18-1ubuntu1.6+esm3",
"binary_name": "libgnutls-openssl27"
},
{
"binary_version": "3.5.18-1ubuntu1.6+esm3",
"binary_name": "libgnutls30"
},
{
"binary_version": "3.5.18-1ubuntu1.6+esm3",
"binary_name": "libgnutlsxx28"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}Ubuntu:Pro:FIPS-preview:22.04:LTS
gnutls28
Package
- Name
- gnutls28
- Purl
- pkg:deb/ubuntu/gnutls28?arch=source&distro=fips-preview%2Fjammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.7.3-4ubuntu1.2+Fips1.1",
"binary_name": "gnutls-bin"
},
{
"binary_version": "3.7.3-4ubuntu1.2+Fips1.1",
"binary_name": "guile-gnutls"
},
{
"binary_version": "3.7.3-4ubuntu1.2+Fips1.1",
"binary_name": "libgnutls-dane0"
},
{
"binary_version": "3.7.3-4ubuntu1.2+Fips1.1",
"binary_name": "libgnutls-openssl27"
},
{
"binary_version": "3.7.3-4ubuntu1.2+Fips1.1",
"binary_name": "libgnutls30"
},
{
"binary_version": "3.7.3-4ubuntu1.2+Fips1.1",
"binary_name": "libgnutlsxx28"
}
]
}Ubuntu:Pro:FIPS-updates:22.04:LTS
gnutls28
Package
- Name
- gnutls28
- Purl
- pkg:deb/ubuntu/gnutls28?arch=source&distro=fips-updates%2Fjammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.7.3-4ubuntu1.6+Fips1
Affected versions
3.*
3.7.3-4ubuntu1.2+Fips1.1
3.7.3-4ubuntu1.3+Fips1.1
3.7.3-4ubuntu1.4+Fips1
3.7.3-4ubuntu1.5+Fips1
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.7.3-4ubuntu1.6+Fips1",
"binary_name": "gnutls-bin"
},
{
"binary_version": "3.7.3-4ubuntu1.6+Fips1",
"binary_name": "guile-gnutls"
},
{
"binary_version": "3.7.3-4ubuntu1.6+Fips1",
"binary_name": "libgnutls-dane0"
},
{
"binary_version": "3.7.3-4ubuntu1.6+Fips1",
"binary_name": "libgnutls-openssl27"
},
{
"binary_version": "3.7.3-4ubuntu1.6+Fips1",
"binary_name": "libgnutls30"
},
{
"binary_version": "3.7.3-4ubuntu1.6+Fips1",
"binary_name": "libgnutlsxx28"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}Ubuntu:Pro:FIPS-updates:24.04:LTS
gnutls28
Package
- Name
- gnutls28
- Purl
- pkg:deb/ubuntu/gnutls28?arch=source&distro=fips-updates%2Fnoble
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.8.3-1.1ubuntu3.4+Fips1
Ecosystem specific
{
"binaries": [
{
"binary_version": "3.8.3-1.1ubuntu3.4+Fips1",
"binary_name": "gnutls-bin"
},
{
"binary_version": "3.8.3-1.1ubuntu3.4+Fips1",
"binary_name": "libgnutls-dane0t64"
},
{
"binary_version": "3.8.3-1.1ubuntu3.4+Fips1",
"binary_name": "libgnutls-openssl27t64"
},
{
"binary_version": "3.8.3-1.1ubuntu3.4+Fips1",
"binary_name": "libgnutls30t64"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}