Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0512-1

Опубликовано: 13 фев. 2025
Источник: suse-cvrf

Описание

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. (bsc#1236878)

Список пакетов

Container suse/ltss/sle12.5/sles12sp5:latest
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
Image SLES12-SP5-EC2-BYOS
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
Image SLES12-SP5-EC2-On-Demand
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
Image SLES12-SP5-EC2-SAP-BYOS
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
Image SLES12-SP5-EC2-SAP-On-Demand
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
SUSE Linux Enterprise Server 12 SP5-LTSS
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
libtasn1-6-32bit-4.9-3.16.1
libtasn1-devel-4.9-3.16.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libtasn1-4.9-3.16.1
libtasn1-6-4.9-3.16.1
libtasn1-6-32bit-4.9-3.16.1
libtasn1-devel-4.9-3.16.1

Ссылки

Описание

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

Затронутые продукты
Container suse/ltss/sle12.5/sles12sp5:latest:libtasn1-4.9-3.16.1
Container suse/ltss/sle12.5/sles12sp5:latest:libtasn1-6-4.9-3.16.1
Image SLES12-SP5-EC2-BYOS:libtasn1-4.9-3.16.1
Image SLES12-SP5-EC2-BYOS:libtasn1-6-4.9-3.16.1
Ссылки