CVE-2024-12133
Medium
Description
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
SeverityMedium
CVSS5.3
Exploit probability66. percentile1.1%
Product
Libtasn1
PublishedFeb 10, 2025
First seenFeb 10, 2025
Weakness typeCWE-407CWE-407
How to fix
Update
- libtasn14.20.0 or later
Vendor advisories
- access.redhat.com/errata/RHSA-2025:17347
- access.redhat.com/errata/RHSA-2025:4049
- access.redhat.com/errata/RHSA-2025:7077
- access.redhat.com/errata/RHSA-2025:8021
- access.redhat.com/errata/RHSA-2025:8385
- access.redhat.com/errata/RHSA-2026:30849
- access.redhat.com/errata/RHSA-2026:30850
- access.redhat.com/errata/RHSA-2026:33125
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libtasn1 | v < 4.20.0 | 4.20.0 |
| enterprise_linux 8 | No range specified | — |
| rhel_aus 8.4 | No range specified | — |
| rhel_aus 8.6 | No range specified | — |
| rhel_e4s 8.8 | No range specified | — |
| enterprise_linux 9 | No range specified | — |
| rhel_e4s 9.2 | No range specified | — |
| rhel_eus 9.4 | No range specified | — |
| discovery 1.14 | No range specified | — |
| Red Hat Red Hat OpenShift Container Platform 4 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.