Libtasn1 (Gnu) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 86 known versions, newest CVE from 2026-01-07. Vendor: Gnu.
CVEs of Libtasn1
- CVE-2025-13151 - CVSS 7.5 (high), 2026-01-07: Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in…
- CVE-2021-46848 - CVSS 9.1 (critical), 2022-10-24: GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
- CVE-2018-1000654 - CVSS 5.5 (medium), 2018-08-20: GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn1Paser against the…
- CVE-2018-6003 - CVSS 7.5 (high), 2018-01-22: An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER decoder leads to…
- CVE-2017-10790 - CVSS 7.5 (high), 2017-07-02: The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that triggers…
- CVE-2017-6891 - CVSS 8.8 (high), 2017-05-22: Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow…
- CVE-2016-4008 - CVSS 5.9 (medium), 2016-05-05: The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows remote…
- CVE-2015-3622 - CVSS 4.3 (medium), 2015-05-12: The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-of-bounds heap…
- CVE-2015-2806 - CVSS 10 (critical), 2015-04-10: Stack-based buffer overflow in asn1_der_decoding in libtasn1 before 4.4 allows remote attackers to have unspecified impact via unknown vectors.
- CVE-2014-3469 - CVSS 5 (medium), 2014-06-05: The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service…
- CVE-2014-3468 - CVSS 7.5 (high), 2014-06-05: The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows…
- CVE-2014-3467 - CVSS 5 (medium), 2014-06-05: Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service…
- CVE-2012-1569 - CVSS 5 (medium), 2012-03-26: The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle…
