A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large     number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even     crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial     of service attack. (CVE-2024-12133)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of gnutls / libtasn1 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12133 advisory.

  - A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large     number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even     crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial     of service attack. (CVE-2024-12133)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a5edb54660 advisory.

    Includes CVE fixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4061 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4061-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     February 21, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : libtasn1-6     Version        : 4.16.0-2+deb11u2     CVE ID         : CVE-2024-12133     Debian Bug     : 1095406

    Bing Shi discovered that libtasn1-6, a runtime library to manage ASN.1     structures, had inefficient handling of certificate data with a large     number of names or name constraints, potentially leading to Denial of     Service upon specially crafted certificates.

    For Debian 11 bullseye, this problem has been fixed in version     4.16.0-2+deb11u2.

    We recommend that you upgrade your libtasn1-6 packages.

    For the detailed security status of libtasn1-6 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libtasn1-6

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7275-2 advisory.

    USN-7275-1 fixed vulnerabilities in Libtasn1. This update provides the corresponding updates for Ubuntu     24.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libtasn1 package has been released.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9b659aa327 advisory.

    Includes CVE fixes.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0512-1 advisory.

    - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF     elements takes       quadratic time to complete. (bsc#1236878)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7275-1 advisory.

    Bing Shi discovered that Libtasn1 inefficiently handled certificates. An attacker could possibly use this     issue to increase resource utilization leading to a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0548-1 advisory.

    - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF     elements takes       quadratic time to complete. (bsc#1236878)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5863 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5863-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     February 10, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : libtasn1-6     CVE ID         : CVE-2024-12133     Debian Bug     : 1095406

    Bing Shi reported a flaw in Libtasn1, a library to manage ASN.1     structures. Inefficient processing of input DER data containing a large     number of SEQUENCE OF or SET OF elements, may result in a denial of     service.

    For the stable distribution (bookworm), this problem has been fixed in     version 4.19.0-2+deb12u1.

    We recommend that you upgrade your libtasn1-6 packages.

    For the detailed security status of libtasn1-6 please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/libtasn1-6

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote host is prior to 3.8.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-039-01 advisory.

    New gnutls packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libtasn1 installed on the remote host is prior to 4.20.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-038-01 advisory.

    New libtasn1 packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the libtasn1 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
228016	Linux Distros Unpatched Vulnerability : CVE-2024-12133	Nessus	Misc.	medium
217104	CBL Mariner 2.0 Security Update: gnutls / libtasn1 (CVE-2024-12133)	Nessus	MarinerOS Local Security Checks	medium
216837	Fedora 40 : libtasn1 (2025-a5edb54660)	Nessus	Fedora Local Security Checks	medium
216594	Debian dla-4061 : libtasn1-6 - security update	Nessus	Debian Local Security Checks	medium
216591	Ubuntu 24.04 LTS : Libtasn1 vulnerability (USN-7275-2)	Nessus	Ubuntu Local Security Checks	medium
216582	Photon OS 4.0: Libtasn1 PHSA-2025-4.0-0758	Nessus	PhotonOS Local Security Checks	medium
216522	Fedora 41 : libtasn1 (2025-9b659aa327)	Nessus	Fedora Local Security Checks	medium
216464	Photon OS 5.0: Libtasn1 PHSA-2025-5.0-0473	Nessus	PhotonOS Local Security Checks	medium
216442	SUSE SLES12 Security Update : libtasn1 (SUSE-SU-2025:0512-1)	Nessus	SuSE Local Security Checks	medium
216431	Ubuntu 20.04 LTS / 22.04 LTS / 24.10 : Libtasn1 vulnerability (USN-7275-1)	Nessus	Ubuntu Local Security Checks	medium
216391	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libtasn1 (SUSE-SU-2025:0548-1)	Nessus	SuSE Local Security Checks	medium
215973	Debian dsa-5863 : libtasn1-6 - security update	Nessus	Debian Local Security Checks	medium
215156	Slackware Linux 15.0 / current gnutls Multiple Vulnerabilities (SSA:2025-039-01)	Nessus	Slackware Local Security Checks	medium
215134	Slackware Linux 15.0 / current libtasn1 Vulnerability (SSA:2025-038-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2024-12133

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium