CVE-2024-12133

EUVD-2024-50622
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensSIMATIC S7-1500 CPU 1518-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIMATIC S7-1500 CPU 1518-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIMATIC S7-1500 CPU 1518F-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIMATIC S7-1500 CPU 1518F-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIPLUS S7-1500 CPU 1518-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensRUGGEDCOM ROX MX5000
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX MX5000RE
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1400
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1500
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1501
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1510
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1511
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1512
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1524
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX1536
𝑥
< V2.17.0
ADP
SiemensRUGGEDCOM ROX RX5000
𝑥
< V2.17.0
ADP
Debian logo
Debian Releases
Debian Product
Codename
libtasn1-6
bookworm
4.19.0-2+deb12u1
fixed
bookworm (security)
4.19.0-2+deb12u1
fixed
bullseye
vulnerable
bullseye (security)
4.16.0-2+deb11u2
fixed
forky
4.20.0-2
fixed
sid
4.20.0-2
fixed
trixie
4.20.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libtasn1-6
bionic
needs-triage
focal
Fixed 4.16.0-2ubuntu0.1
released
jammy
Fixed 4.18.0-4ubuntu0.1
released
noble
Fixed 4.19.0-3ubuntu0.24.04.1
released
oracular
Fixed 4.19.0-3ubuntu0.24.10.1
released
plucky
not-affected
questing
not-affected
trusty
needs-triage
xenial
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libtasn1
suse enterprise desktop 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise desktop 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise server 12 SP3
4.9-3.16.1
fixed
suse enterprise server 12 SP5
4.9-3.16.1
fixed
suse enterprise server 15 SP2
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP7
4.13-150000.4.11.1
fixed
libtasn1-6
suse enterprise desktop 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise desktop 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise server 12 SP3
4.9-3.16.1
fixed
suse enterprise server 12 SP5
4.9-3.16.1
fixed
suse enterprise server 15 SP2
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP7
4.13-150000.4.11.1
fixed
libtasn1-6-32bit
suse enterprise desktop 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise desktop 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise server 12 SP3
4.9-3.16.1
fixed
suse enterprise server 12 SP5
4.9-3.16.1
fixed
suse enterprise server 15 SP2
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP7
4.13-150000.4.11.1
fixed
libtasn1-devel
suse enterprise desktop 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise desktop 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise sap 15 SP7
4.13-150000.4.11.1
fixed
suse enterprise server 12 SP5
4.9-3.16.1
fixed
suse enterprise server 15 SP2
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP3
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP4
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP5
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP6
4.13-150000.4.11.1
fixed
suse enterprise server 15 SP7
4.13-150000.4.11.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
libtasn1
RHEL 8
0:4.13-5.el8_10
fixed
RHEL 9
0:4.16.0-9.el9
fixed
libtasn1-devel
RHEL 8
0:4.13-5.el8_10
fixed
RHEL 9
0:4.16.0-9.el9
fixed
libtasn1-tools
RHEL 8
0:4.13-5.el8_10
fixed
RHEL 9
0:4.16.0-9.el9
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2025:17347
https://access.redhat.com/errata/RHSA-2025:4049
https://access.redhat.com/errata/RHSA-2025:7077
https://access.redhat.com/errata/RHSA-2025:8021
https://access.redhat.com/errata/RHSA-2025:8385
https://access.redhat.com/security/cve/CVE-2024-12133
https://bugzilla.redhat.com/show_bug.cgi?id=2344611
https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md
https://gitlab.com/gnutls/libtasn1/-/issues/52
http://www.openwall.com/lists/oss-security/2025/02/06/6
https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html
https://security.netapp.com/advisory/ntap-20250523-0003/
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
https://cert-portal.siemens.com/productcert/html/ssa-202008.html