A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00475.

Exploitation none

Automatable yes

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
unaffected
Version Status Constraints
0 affected
< 4.20.0
Red Hat Red Hat Enterprise Linux 8 affected
Version Status Constraints
0:4.13-5.el8_10 unaffected
< *
Red Hat Red Hat Enterprise Linux 8 affected
Version Status Constraints
0:4.13-5.el8_10 unaffected
< *
Red Hat Red Hat Enterprise Linux 9 affected
Version Status Constraints
0:4.16.0-9.el9 unaffected
< *
Red Hat Red Hat Enterprise Linux 9 affected
Version Status Constraints
0:4.16.0-9.el9 unaffected
< *
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions affected
Version Status Constraints
0:4.16.0-8.el9_2.1 unaffected
< *
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support affected
Version Status Constraints
0:4.16.0-8.el9_4.1 unaffected
< *
Red Hat Red Hat Discovery 1.14 affected
Version Status Constraints
sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c unaffected
< *
Red Hat Red Hat Discovery 1.14 affected
Version Status Constraints
sha256:c960fa13577db72b52765d6941688f431f61fe38adb717b2d8bb6569e241bc5e unaffected
< *
Red Hat Red Hat Enterprise Linux 10 affected —
Red Hat Red Hat Enterprise Linux 6 unknown —
Red Hat Red Hat Enterprise Linux 7 unknown —
Red Hat Red Hat OpenShift Container Platform 4 affected —

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
libtasn1-0:4.13-5.el8_10 cpe:/a:redhat:enterprise_linux:8 RHSA-2025:4049 2025-04-23T00:00:00Z
libtasn1-0:4.13-5.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2025:4049 2025-04-23T00:00:00Z
Red Hat Enterprise Linux 9
libtasn1-0:4.16.0-9.el9 cpe:/a:redhat:enterprise_linux:9 RHSA-2025:7077 2025-05-13T00:00:00Z
libtasn1-0:4.16.0-9.el9 cpe:/o:redhat:enterprise_linux:9 RHSA-2025:7077 2025-05-13T00:00:00Z
Red Hat Enterprise Linux 9.4 Extended Update Support
libtasn1-0:4.16.0-8.el9_4.1 cpe:/a:redhat:rhel_eus:9.4 RHSA-2025:8021 2025-05-20T00:00:00Z
Red Hat Discovery 1.14
registry.redhat.io/discovery/discovery-server-rhel9:sha256:ad1045aa0de937c3a6969ec377f7bfeda9a44ee434a954e8245e9840316ffc1c cpe:/a:redhat:discovery:1.14::el9 RHSA-2025:8385 2025-06-02T00:00:00Z
registry.redhat.io/discovery/discovery-ui-rhel9:sha256:492e412759cf0eedfa5b557f7b0865f8864f84d0ed75e11dc8d7a840837d9644 cpe:/a:redhat:discovery:1.14::el9 RHSA-2025:8385 2025-06-02T00:00:00Z

No data.

Subscriptions

Vendors Products
Redhat Subscribe
Discovery Subscribe
Enterprise Linux Subscribe
Openshift Subscribe
Rhel E4s Subscribe
Rhel Eus Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4061-1 libtasn1-6 security update
Debian DSA Debian DSA DSA-5863-1 libtasn1-6 security update
EUVD EUVD EUVD-2024-50622 A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
Ubuntu USN Ubuntu USN USN-7275-1 Libtasn1 vulnerability
Ubuntu USN Ubuntu USN USN-7275-2 Libtasn1 vulnerability
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.openwall.com/lists/oss-security/2025/02/06/6 cve-icon
https://access.redhat.com/errata/RHSA-2025:17347 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:4049 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:7077 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8021 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:8385 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-12133 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2344611 cve-icon cve-icon
https://gitlab.com/gnutls/libtasn1/-/blob/master/doc/security/CVE-2024-12133.md cve-icon cve-icon
https://gitlab.com/gnutls/libtasn1/-/issues/52 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/02/msg00025.html cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-12133 cve-icon
https://security.netapp.com/advisory/ntap-20250523-0003/ cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-12133 cve-icon
History

Tue, 24 Mar 2026 23:00:00 +0000

Type Values Removed Values Added
References

Mon, 06 Oct 2025 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel E4s
CPEs cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
Vendors & Products Redhat rhel E4s
References

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00247}

 epss

{'score': 0.00201}

Mon, 02 Jun 2025 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat discovery
CPEs cpe:/a:redhat:discovery:1.14::el9
Vendors & Products Redhat discovery
References

Fri, 23 May 2025 14:30:00 +0000

Type Values Removed Values Added
References

Thu, 22 May 2025 09:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10

Wed, 21 May 2025 03:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_eus:9.4

Tue, 20 May 2025 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.4::appstream
cpe:/o:redhat:rhel_eus:9.4::baseos
Vendors & Products Redhat rhel Eus
References

Wed, 14 May 2025 03:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Tue, 13 May 2025 08:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:9 cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/o:redhat:enterprise_linux:9::baseos
References

Thu, 24 Apr 2025 03:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:8

Wed, 23 Apr 2025 12:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/o:redhat:enterprise_linux:8::baseos
References

Fri, 21 Feb 2025 13:30:00 +0000

Type Values Removed Values Added
References

Mon, 10 Feb 2025 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 10 Feb 2025 16:45:00 +0000

Type Values Removed Values Added
References

Mon, 10 Feb 2025 15:30:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE. A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
Title libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos
First Time appeared Redhat
Redhat enterprise Linux
Redhat openshift
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat openshift
References

Mon, 10 Feb 2025 13:30:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE.
Title libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS
Weaknesses CWE-407
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

threat_severity

Moderate
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-03-24T22:38:46.398Z

Reserved: 2024-12-04T03:13:48.478Z

Link: CVE-2024-12133

cve-icon Vulnrichment

Updated: 2025-05-23T13:10:59.480Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-02-10T16:15:37.260

Modified: 2026-03-24T23:17:06.610

Link: CVE-2024-12133

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-10T00:00:00Z

Links: CVE-2024-12133 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses