CVE-2024-12133: Libtasn1: inefficient der decoding in libtasn1 leading to potential remote dos

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-10 · updated 2026-10-22
Weakness: CWE-407

Description

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

Affected products

Red Hat OpenShift Container Platform 4.18: all versions
Red Hat Discovery 1.14: all versions — fixed in 1.14.2-1748467619, 1.14.3-1748529279
Red Hat Enterprise Linux 8: all versions — fixed in 0:4.13-5.el8_10
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: all versions — fixed in 0:3.6.14-10.el8_4.1, 0:4.13-3.el8_4.1
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: all versions — fixed in 0:3.6.14-10.el8_4.1, 0:4.13-3.el8_4.1
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: all versions — fixed in 0:3.6.16-5.el8_6.5, 0:4.13-3.el8_6.2
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: all versions — fixed in 0:3.6.16-5.el8_6.5, 0:4.13-3.el8_6.2
Red Hat Enterprise Linux 8.8 Telecommunications Update Service: all versions — fixed in 0:3.6.16-7.el8_8.4, 0:4.13-4.el8_8.1
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: all versions — fixed in 0:3.6.16-7.el8_8.4, 0:4.13-4.el8_8.1
Red Hat Enterprise Linux 9: all versions — fixed in 0:4.16.0-9.el9
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: all versions — fixed in 0:4.16.0-8.el9_2.1
Red Hat Enterprise Linux 9.4 Extended Update Support: all versions — fixed in 0:4.16.0-8.el9_4.1

How to fix

Upgrade to a fixed version: Red Hat Discovery 1.14 1.14.2-1748467619, 1.14.3-1748529279; Red Hat Enterprise Linux 8 0:4.13-5.el8_10; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:3.6.14-10.el8_4.1, 0:4.13-3.el8_4.1; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 0:3.6.14-10.el8_4.1, 0:4.13-3.el8_4.1; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:3.6.16-5.el8_6.5, 0:4.13-3.el8_6.2; Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 0:3.6.16-5.el8_6.5, 0:4.13-3.el8_6.2; Red Hat Enterprise Linux 8.8 Telecommunications Update Service 0:3.6.16-7.el8_8.4, 0:4.13-4.el8_8.1; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 0:3.6.16-7.el8_8.4, 0:4.13-4.el8_8.1; Red Hat Enterprise Linux 9 0:4.16.0-9.el9; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:4.16.0-8.el9_2.1; Red Hat Enterprise Linux 9.4 Extended Update Support 0:4.16.0-8.el9_4.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-12133 or the next vulnerability affects your stack