Vulnerabilities

TI-2025-12022 CVE-2025-13151 · GHSA-f433-vfwr-65r3

Out-of-bounds write in GNU libtasn1

MEDIUM 42

Stack-based buffer overflow in libtasn1 version: v4.20.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0137 Published 2026-01-07 Partial fix CWE-787

TI-2021-21531 CVE-2021-46848 · GHSA-6468-68pw-9chw

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

MEDIUM 50

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02823 Published 2022-10-24 Partial fix CWE-193

TI-2018-16007 CVE-2018-1000654 · GHSA-g69v-w5wh-rhwv

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS…

LOW 29

GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the POC due to an issue in _asn1_expand_object_id(p_tree), after…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01982 Published 2018-08-20 Fix deferred

TI-2018-04371 CVE-2018-6003 · GHSA-834w-g79f-wrqv

An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU…

LOW 38

An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02825 Published 2018-01-22 Will not fix CWE-674

TI-2017-07895 CVE-2017-10790 · GHSA-xcv8-6xfc-9686

The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer…

MEDIUM 41

The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers assignment of a NULL value within an asn1_node structure.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04896 Published 2017-07-02 Will not fix CWE-476

TI-2017-04623 CVE-2017-6891 · GHSA-ch46-3x6h-7qrw

Out-of-bounds write in Flexera Software LLC GnuTLS libtasn1

MEDIUM 47

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assign…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05585 Published 2017-05-22 Will not fix CWE-787

TI-2016-03409 CVE-2016-4008 · GHSA-mr9j-58fj-gv7c

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when…

MEDIUM 50

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote attackers to cause a denial of service (infinite recursion) via a c…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.29405 Published 2016-05-05 Will not fix CWE-399

TI-2015-03063 CVE-2015-3622 · GHSA-359p-x9w8-8g33

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows…

MEDIUM 45

The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted certificate.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.32892 Published 2015-05-12 Partial fix CWE-119

TI-2015-02477 CVE-2015-2806 · GHSA-72cq-2586-ch4w

Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote…

MEDIUM 53

Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07746 Published 2015-04-10 Partial fix CWE-119

TI-2014-02796 CVE-2014-3469 · GHSA-52vj-cjhg-wpwv

The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6…

LOW 29

The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a NULL value in an ivalue…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03817 Published 2014-06-05 Partial fix CWE-476

TI-2014-02795 CVE-2014-3468 · GHSA-qg3j-x87h-jwjm

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an…

LOW 39

The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows context-dependent attackers to cause out-of-bounds access via crafted ASN.…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03789 Published 2014-06-05 Partial fix CWE-131

TI-2014-02794 CVE-2014-3467 · GHSA-pfh9-rfxw-j6x2

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as…

LOW 33

Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service (out-of-bounds read) via crafted ASN.1 data.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.068 Published 2014-06-05 Partial fix

TI-2012-01361 CVE-2012-1569 · GHSA-jcv4-2hjq-vv2c

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in…

LOW 30

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0441 Published 2012-03-26 Partial fix CWE-189

Vulnerabilities

Filters