CVE-2021-46848

Description

References

• bugs.gentoo.org/866237 · Issue Tracking
• gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5 · Patch
• gitlab.com/gnutls/libtasn1/-/issues/32 · Exploit
• lists.debian.org/debian-lts-announce/2023/01/msg00003.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2
• security.netapp.com/advisory/ntap-20221118-0006 · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-398330.html

libtasn1의 다른 취약점

• CVE-2025-13151높음 7.5Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overfl…
• CVE-2018-1000654보통 5.5GNU Libtasn1-4.13 libtasn1-4.13 version libtasn1-4.13, libtasn1-4.12 contains a DoS, specifically CPU usage will reach 100% when running asn…
• CVE-2018-6003높음 7.5An issue was discovered in the _asn1_decode_simple_ber function in decoding.c in GNU Libtasn1 before 4.13. Unlimited recursion in the BER de…
• CVE-2017-10790높음 7.5The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that…
• CVE-2017-6891높음 8.8Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-bas…