Red Hat Security Advisory

RHSA-2023:0116

libtasn1 security update

Released 2023-01-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libtasn1-devel-4.13-4.el8_7, libtasn1-tools-4.13-4.el8_7
Red Hat Enterprise Linux BaseOS (v. 8) libtasn1-4.13-4.el8_7

TI-2021-21531 CVE-2021-46848 · GHSA-6468-68pw-9chw

MEDIUM 50

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02823 Published 2022-10-24 Partial fix CWE-193