Lucene search
RedHatRHSA-2024:0427HistoryJan 24, 2024 - 2:40 p.m.
(RHSA-2024:0427) Moderate: libtasn1 security update
2024-01-2414:40:31
access.redhat.com
14
libtasn1
security update
out-of-bound access
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.3%
A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.
Security Fix(es):
- libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | aarch64 | libtasn1-tools | < 4.13-3.el8_6.1 | libtasn1-tools-4.13-3.el8_6.1.aarch64.rpm |
| RedHat | 8 | i686 | libtasn1 | < 4.13-3.el8_6.1 | libtasn1-4.13-3.el8_6.1.i686.rpm |
| RedHat | 8 | i686 | libtasn1-devel | < 4.13-3.el8_6.1 | libtasn1-devel-4.13-3.el8_6.1.i686.rpm |
| RedHat | 8 | i686 | libtasn1-debugsource | < 4.13-3.el8_6.1 | libtasn1-debugsource-4.13-3.el8_6.1.i686.rpm |
| RedHat | 8 | ppc64le | libtasn1-tools | < 4.13-3.el8_6.1 | libtasn1-tools-4.13-3.el8_6.1.ppc64le.rpm |
| RedHat | 8 | aarch64 | libtasn1-tools-debuginfo | < 4.13-3.el8_6.1 | libtasn1-tools-debuginfo-4.13-3.el8_6.1.aarch64.rpm |
| RedHat | 8 | s390x | libtasn1-tools-debuginfo | < 4.13-3.el8_6.1 | libtasn1-tools-debuginfo-4.13-3.el8_6.1.s390x.rpm |
| RedHat | 8 | aarch64 | libtasn1-debuginfo | < 4.13-3.el8_6.1 | libtasn1-debuginfo-4.13-3.el8_6.1.aarch64.rpm |
| RedHat | 8 | ppc64le | libtasn1-tools-debuginfo | < 4.13-3.el8_6.1 | libtasn1-tools-debuginfo-4.13-3.el8_6.1.ppc64le.rpm |
| RedHat | 8 | x86_64 | libtasn1-devel | < 4.13-3.el8_6.1 | libtasn1-devel-4.13-3.el8_6.1.x86_64.rpm |
Related
nessus
nessus
AlmaLinux 9 : libtasn1 (ALSA-2023:0343)
2023-01-25 00:00:00
RHEL 9 : libtasn1 (RHSA-2023:0343)
2023-01-23 00:00:00
SUSE SLED15 / SLES15 Security Update : libtasn1 (SUSE-SU-2022:3784-1)
2022-10-27 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2023-1658)
2023-04-27 00:00:00
Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2023-1390)
2023-02-10 00:00:00
Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2023-2156)
2023-06-09 00:00:00
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2021-46848 affecting package libtasn1 for versions less than 4.19.0-1
2022-10-27 18:36:13
CVE-2021-46848 affecting package libtasn1 4.14-2
2022-11-03 00:44:52
osv
osv
libtasn1-6 vulnerability
2022-10-31 14:57:35
Moderate: libtasn1 security update
2023-01-23 14:30:54
libtasn1-6 - security update
2023-01-09 00:00:00
prion
prion
Code injection
2022-10-24 14:15:00
veracode
veracode
Denial Of Service (DoS)
2022-11-03 02:52:05
fedora
fedora
[SECURITY] Fedora 37 Update: mingw-libtasn1-4.19.0-1.fc37
2022-11-14 01:14:16
[SECURITY] Fedora 36 Update: mingw-libtasn1-4.19.0-1.fc36
2022-11-13 01:19:41
[SECURITY] Fedora 35 Update: mingw-libtasn1-4.19.0-1.fc35
2022-11-13 01:21:02
rocky
rocky
libtasn1 security update
2023-01-12 08:25:44
libtasn1 security update
2023-01-23 14:30:54
alpinelinux
alpinelinux
CVE-2021-46848
2022-10-24 14:15:49
redos
redos
ROS-20221103-04
2022-11-03 00:00:00
redhatcve
redhatcve
CVE-2021-46848
2022-11-04 10:26:05
ubuntucve
ubuntucve
CVE-2021-46848
2022-10-25 00:00:00
amazon
amazon
Important: libtasn1
2023-01-18 00:16:00
oraclelinux
oraclelinux
libtasn1 security update
2023-01-12 00:00:00
libtasn1 security update
2023-01-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2194
2023-07-18 11:28:24
redhat
redhat
(RHSA-2023:0343) Moderate: libtasn1 security update
2023-01-23 14:30:54
(RHSA-2023:0116) Moderate: libtasn1 security update
2023-01-12 08:25:44
cve
cve
CVE-2021-46848
2022-10-24 14:15:49
ubuntu
ubuntu
Libtasn1 vulnerability
2022-10-31 00:00:00
almalinux
almalinux
Moderate: libtasn1 security update
2023-01-12 00:00:00
Moderate: libtasn1 security update
2023-01-23 00:00:00
debian
debian
[SECURITY] [DLA 3263-1] libtasn1-6 security update
2023-01-09 18:00:51
suse
suse
Security update for libtasn1 (critical)
2022-10-26 00:00:00
cvelist
cvelist
CVE-2021-46848
2022-10-24 00:00:00
mageia
mageia
Updated libtasn1 packages fix security vulnerability
2022-11-08 22:44:28
nvd
nvd
CVE-2021-46848
2022-10-24 14:15:49
debiancve
debiancve
CVE-2021-46848
2022-10-24 14:15:49
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0479
2022-10-28 00:00:00
Critical Photon OS Security Update - PHSA-2022-0533
2022-10-28 00:00:00
Critical Photon OS Security Update - PHSA-2022-0271
2022-10-28 00:00:00
qualysblog
qualysblog
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.3%
Related for RHSA-2024:0427