Red Hat Security Advisory

RHSA-2023:0343

libtasn1 security update

Released 2023-01-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libtasn1-devel-4.16.0-8.el9_1, libtasn1-tools-4.16.0-8.el9_1
Red Hat Enterprise Linux BaseOS (v. 9) libtasn1-4.16.0-8.el9_1

TI-2021-21531 CVE-2021-46848 · GHSA-6468-68pw-9chw

MEDIUM 50

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02823 Published 2022-10-24 Partial fix CWE-193