Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

An update of the libtasn1 package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0224-1 advisory.

    - CVE-2025-13151: stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4ed69f3065 advisory.

    Update to 4.21.0, fixes CVE-2025-13151.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-0dfbd2a5e2 advisory.

    Update to 4.21.0, fixes CVE-2025-13151.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0118-1 advisory.

    - CVE-2025-13151: stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7954-1 advisory.

    It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content. An attacker could possibly use     this issue to cause Libtasn1 to crash, resulting in a denial of service. (CVE-2025-13151)

    It was discovered that Libtasn1 incorrectly handled encoding ASN.1 content. An attacker could possibly use     this issue to cause Libtasn1 to crash, resulting in a denial of service. This issue only affected Ubuntu     22.04 LTS. (CVE-2021-46848)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7e63d0dd-eeff-11f0-b135-c01803b56cc4 advisory.

    oss-security@ list reports:
    Stack-based buffer overflow in libtasn1 version: v4.20.0.
            The function fails to validate the size of input data resulting             in a buffer overflow in asn1_expend_octet_string.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libtasn1 installed on the remote host is prior to 4.21.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-008-01 advisory.

    New libtasn1 packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the libtasn1 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input     data resulting in a buffer overflow in asn1_expend_octet_string. (CVE-2025-13151)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
297257	Photon OS 5.0: Libtasn1 PHSA-2026-5.0-0737	Nessus	PhotonOS Local Security Checks	high
297247	Photon OS 4.0: Libtasn1 PHSA-2026-4.0-0946	Nessus	PhotonOS Local Security Checks	high
296433	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libtasn1 (SUSE-SU-2026:0224-1)	Nessus	SuSE Local Security Checks	high
294948	Fedora 42 : mingw-libtasn1 (2026-4ed69f3065)	Nessus	Fedora Local Security Checks	high
294945	Fedora 43 : mingw-libtasn1 (2026-0dfbd2a5e2)	Nessus	Fedora Local Security Checks	high
284810	SUSE SLES12 Security Update : libtasn1 (SUSE-SU-2026:0118-1)	Nessus	SuSE Local Security Checks	high
284657	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : Libtasn1 vulnerabilities (USN-7954-1)	Nessus	Ubuntu Local Security Checks	critical
282575	FreeBSD : libtasn1 -- Stack-based buffer overflow (7e63d0dd-eeff-11f0-b135-c01803b56cc4)	Nessus	FreeBSD Local Security Checks	high
282489	Slackware Linux 15.0 / current libtasn1 Vulnerability (SSA:2026-008-01)	Nessus	Slackware Local Security Checks	high
282447	Linux Distros Unpatched Vulnerability : CVE-2025-13151	Nessus	Misc.	high

Detections

Analytics

CVE-2025-13151

high

Tenable Plugins

high

high

high

high

high

high

critical

high

high

high