ALT Linux Team

Package libtasn1 update in c10f2 on 2025-02-25

ALT-PU-2025-3302-3

Package libtasn1 updated to version 4.20.0-alt1 for branch c10f2 in task 375550.

Closed vulnerabilities

Published: 2025-02-10
Modified: 2025-02-21

CVE-2024-12133

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top