CVE-2025-13151

概要

参考情報

• gitlab.com/gnutls/libtasn1 · Product
• gitlab.com/gnutls/libtasn1/-/merge_requests/121 · Patch
• openwall.com/lists/oss-security/2026/01/08/5 · Mailing List
• kb.cert.org/vuls/id/271649 · Third Party Advisory

libtasn1 のその他の脆弱性

• CVE-2021-46848緊急 9.1GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
• CVE-2018-1000654中 5.5GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn…
• CVE-2018-6003高 7.5An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER de…
• CVE-2017-10790高 7.5The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that…
• CVE-2017-6891高 8.8Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-bas…