Lucene search
Alpine Linux Development TeamALPINE:CVE-2021-46848HistoryOct 24, 2022 - 2:15 p.m.
CVE-2021-46848
2022-10-2414:15:49
Alpine Linux Development Team
security.alpinelinux.org
34
cve-2021-46848
gnu libtasn1
etype_ok
array size check
asn1_encode_simple_der
unix
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.6 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.4%
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | libtasn1 | < 4.19-r0 | UNKNOWN |
| Alpine | 3.14-main | noarch | libtasn1 | < 4.17.0-r1 | UNKNOWN |
| Alpine | 3.15-main | noarch | libtasn1 | < 4.18.0-r1 | UNKNOWN |
| Alpine | 3.16-main | noarch | libtasn1 | < 4.18.0-r1 | UNKNOWN |
| Alpine | 3.17-main | noarch | libtasn1 | < 4.19-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | libtasn1 | < 4.19-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | libtasn1 | < 4.19-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | libtasn1 | < 4.19-r0 | UNKNOWN |
Related
nessus
nessus
AlmaLinux 9 : libtasn1 (ALSA-2023:0343)
2023-01-25 00:00:00
EulerOS Virtualization 2.11.1 : libtasn1 (EulerOS-SA-2023-2037)
2023-06-07 00:00:00
EulerOS Virtualization 3.0.6.6 : libtasn1 (EulerOS-SA-2023-2428)
2023-07-26 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2023-1390)
2023-02-10 00:00:00
Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2023-1658)
2023-04-27 00:00:00
Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2023-2156)
2023-06-09 00:00:00
ibm
ibm
osv
osv
libtasn1-6 vulnerability
2022-10-31 14:57:35
Moderate: libtasn1 security update
2023-01-23 14:30:54
libtasn1-6 - security update
2023-01-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-46848 affecting package libtasn1 for versions less than 4.19.0-1
2022-10-27 18:36:13
CVE-2021-46848 affecting package libtasn1 4.14-2
2022-11-03 00:44:52
prion
prion
Code injection
2022-10-24 14:15:00
veracode
veracode
Denial Of Service (DoS)
2022-11-03 02:52:05
fedora
fedora
[SECURITY] Fedora 37 Update: mingw-libtasn1-4.19.0-1.fc37
2022-11-14 01:14:16
[SECURITY] Fedora 35 Update: mingw-libtasn1-4.19.0-1.fc35
2022-11-13 01:21:02
[SECURITY] Fedora 36 Update: mingw-libtasn1-4.19.0-1.fc36
2022-11-13 01:19:41
rocky
rocky
libtasn1 security update
2023-01-12 08:25:44
libtasn1 security update
2023-01-23 14:30:54
redos
redos
ROS-20221103-04
2022-11-03 00:00:00
redhatcve
redhatcve
CVE-2021-46848
2022-11-04 10:26:05
oraclelinux
oraclelinux
libtasn1 security update
2023-01-12 00:00:00
libtasn1 security update
2023-01-25 00:00:00
redhat
redhat
(RHSA-2023:0343) Moderate: libtasn1 security update
2023-01-23 14:30:54
(RHSA-2024:0427) Moderate: libtasn1 security update
2024-01-24 14:40:31
(RHSA-2023:0116) Moderate: libtasn1 security update
2023-01-12 08:25:44
rosalinux
rosalinux
Advisory ROSA-SA-2023-2194
2023-07-18 11:28:24
cve
cve
CVE-2021-46848
2022-10-24 14:15:49
ubuntucve
ubuntucve
CVE-2021-46848
2022-10-25 00:00:00
amazon
amazon
Important: libtasn1
2023-01-18 00:16:00
cvelist
cvelist
CVE-2021-46848
2022-10-24 00:00:00
suse
suse
Security update for libtasn1 (critical)
2022-10-26 00:00:00
debian
debian
[SECURITY] [DLA 3263-1] libtasn1-6 security update
2023-01-09 18:00:51
almalinux
almalinux
Moderate: libtasn1 security update
2023-01-12 00:00:00
Moderate: libtasn1 security update
2023-01-23 00:00:00
ubuntu
ubuntu
Libtasn1 vulnerability
2022-10-31 00:00:00
nvd
nvd
CVE-2021-46848
2022-10-24 14:15:49
mageia
mageia
Updated libtasn1 packages fix security vulnerability
2022-11-08 22:44:28
debiancve
debiancve
CVE-2021-46848
2022-10-24 14:15:49
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0479
2022-10-28 00:00:00
Critical Photon OS Security Update - PHSA-2022-0533
2022-10-28 00:00:00
Critical Photon OS Security Update - PHSA-2022-0271
2022-10-28 00:00:00
qualysblog
qualysblog
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
9.6 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.4%
Related for ALPINE:CVE-2021-46848