CVE-2024-12133

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
redhatCNA
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVEADP
---
---
CISA-ADPADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
Debian logo
Debian Releases
Debian Product
Codename
libtasn1-6
bullseye
vulnerable
bullseye (security)
4.16.0-2+deb11u2
fixed
bookworm
4.19.0-2+deb12u1
fixed
bookworm (security)
4.19.0-2+deb12u1
fixed
sid
4.20.0-2
fixed
trixie
4.20.0-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libtasn1-6
plucky
not-affected
oracular
Fixed 4.19.0-3ubuntu0.24.10.1
released
noble
Fixed 4.19.0-3ubuntu0.24.04.1
released
jammy
Fixed 4.18.0-4ubuntu0.1
released
focal
Fixed 4.16.0-2ubuntu0.1
released
bionic
needs-triage
xenial
needs-triage
trusty
needs-triage
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2025:4049
https://access.redhat.com/errata/RHSA-2025:7077
https://access.redhat.com/errata/RHSA-2025:8021
https://access.redhat.com/security/cve/CVE-2024-12133
https://bugzilla.redhat.com/show_bug.cgi?id=2344611
https://gitlab.com/gnutls/libtasn1/-/issues/52
http://www.openwall.com/lists/oss-security/2025/02/06/6
https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html
https://security.netapp.com/advisory/ntap-20250523-0003/