A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient     algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to     increased resource consumption. This flaw allows a remote attacker to send a specially crafted     certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
    (CVE-2024-12243)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0764-1 advisory.

    - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0766-1 advisory.

    - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0767-1 advisory.

    - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the gnutls package has been released.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5e5783f0d1 advisory.

    Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4063 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4063-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     February 21, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : gnutls28     Version        : 3.7.1-5+deb11u7     CVE ID         : CVE-2024-12243

    Bing Shi discovered that GnuTLS, a portable library which implements     the Transport Layer Security and Datagram Transport Layer Security     protocols, had inefficient handling of certificate data with a large     number of names or name constraints, potentially leading to Denial of     Service upon specially crafted certificates.

    For Debian 11 bullseye, this problem has been fixed in version     3.7.1-5+deb11u7.

    We recommend that you upgrade your gnutls28 packages.

    For the detailed security status of gnutls28 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gnutls28

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7281-1 advisory.

    Bing Shi discovered that GnuTLS incorrectly handled decoding certain DER-encoded certificates. A remote     attacker could possibly use this issue to cause GnuTLS to consume resources, leading to a denial of     service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a62f1e771c advisory.

    Update gnutls to the latest upstream release, including a fix for CVE-2024-12243.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5867 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5867-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     February 17, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : gnutls28     CVE ID         : CVE-2024-12243

    Bing Shi reported a flaw in GnuTLS, a library implementing the TLS and     SSL protocols. Inefficient processing of certificates containing     numerous names or name constraints may result in a denial of service.

    For the stable distribution (bookworm), this problem has been fixed in     version 3.7.9-2+deb12u4.

    We recommend that you upgrade your gnutls28 packages.

    For the detailed security status of gnutls28 please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/gnutls28

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote host is prior to 3.8.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-039-01 advisory.

    New gnutls packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
228041	Linux Distros Unpatched Vulnerability : CVE-2024-12243	Nessus	Misc.	medium
218743	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gnutls (SUSE-SU-2025:0764-1)	Nessus	SuSE Local Security Checks	medium
218741	SUSE SLES12 Security Update : gnutls (SUSE-SU-2025:0766-1)	Nessus	SuSE Local Security Checks	medium
218385	SUSE SLES12 Security Update : gnutls (SUSE-SU-2025:0767-1)	Nessus	SuSE Local Security Checks	medium
216875	Photon OS 5.0: Gnutls PHSA-2025-5.0-0480	Nessus	PhotonOS Local Security Checks	medium
216841	Photon OS 4.0: Gnutls PHSA-2025-4.0-0759	Nessus	PhotonOS Local Security Checks	medium
216840	Fedora 40 : gnutls (2025-5e5783f0d1)	Nessus	Fedora Local Security Checks	medium
216622	Debian dla-4063 : gnutls-bin - security update	Nessus	Debian Local Security Checks	medium
216587	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : GnuTLS vulnerability (USN-7281-1)	Nessus	Ubuntu Local Security Checks	medium
216513	Fedora 41 : gnutls (2025-a62f1e771c)	Nessus	Fedora Local Security Checks	medium
216403	Debian dsa-5867 : gnutls-bin - security update	Nessus	Debian Local Security Checks	medium
215156	Slackware Linux 15.0 / current gnutls Multiple Vulnerabilities (SSA:2025-039-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2024-12243

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium