Detections
Analytics
CVE-2024-12243
medium
Description
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
References
https://access.redhat.com/errata/RHSA-2025:8385
https://access.redhat.com/errata/RHSA-2025:8020
https://access.redhat.com/errata/RHSA-2025:7076
https://security.netapp.com/advisory/ntap-20250523-0002/
https://lists.debian.org/debian-lts-announce/2025/02/msg00027.html
https://gitlab.com/gnutls/libtasn1/-/issues/52
https://gitlab.com/gnutls/gnutls/-/issues/1553
https://cert-portal.siemens.com/productcert/html/ssa-202008.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html