CVE-2024-12133

libtasn1: This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a...

CVE-2024-12133 is fixed in 8 products on 1 platform, first by DSA-5863-1, released February 10, 2025. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.3
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0111
66th percentile

This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. (bsc#1236878)

Where it's fixed

ProductFixed inFixReleased
Linux
libtasn1 · RHEL 8 0:4.13-5.el8_10 RHSA-2025:4049 Apr 23, 2025
libtasn1 · RHEL 9 0:4.16.0-9.el9 RHSA-2025:7077 May 13, 2025
libtasn1 · almalinux 8 4.13-5.el8_10 ALSA-2025:4049 Apr 22, 2025
libtasn1 · almalinux 9 4.16.0-9.el9 ALSA-2025:7077 May 13, 2025
libtasn1 · amzn 2023 4.19.0-1.amzn2023.0.5 ALAS2023-2025-989 May 21, 2025
libtasn1 · ol 8 0:4.13-5.el8_10 ELSA-2025-4049 Apr 21, 2025
libtasn1 · ol 9 0:4.16.0-9.el9 ELSA-2025-7077 May 16, 2025
libtasn1 · opensuse-leap 15.6 4.13-150000.4.11.1 SUSE-SU-2025:0548-1 Feb 14, 2025
libtasn1 · rocky 8 0:4.13-5.el8_10 RLSA-2025:4049 Jul 29, 2025
libtasn1 · rocky 9 0:4.16.0-9.el9 RLSA-2025:7077 Oct 4, 2025
libtasn1 · sles 15.6 4.13-150000.4.11.1 SUSE-SU-2025:0548-1 Feb 14, 2025
libtasn1-6 · Debian 11.6 (bullseye) 4.16.0-2+deb11u2 DLA-4061-1 Feb 21, 2025
libtasn1-6 · Debian 12.15 (bookworm) 4.19.0-2+deb12u1 DSA-5863-1 Feb 10, 2025
libtasn1-6 · Debian 13.5 (trixie) 4.20.0-1 DEBIAN-CVE-2024-12133 Feb 10, 2025
libtasn1-6 · Debian 14 4.20.0-1 DEBIAN-CVE-2024-12133 Feb 10, 2025
libtasn1-6 · Ubuntu 20.04 LTS (focal) 4.16.0-2ubuntu0.1 libtasn1-6 4.16.0-2ubuntu0.1 Feb 10, 2025
libtasn1-6 · Ubuntu 22.04.1 LTS (jammy) 4.18.0-4ubuntu0.1 libtasn1-6 4.18.0-4ubuntu0.1 Feb 10, 2025
libtasn1-6 · Ubuntu 24.04.5 LTS (noble) 4.19.0-3ubuntu0.24.04.1 libtasn1-6 4.19.0-3ubuntu0.24.04.1 Feb 10, 2025
libtasn1-6 · Ubuntu 24.10 (oracular) 4.19.0-3ubuntu0.24.10.1 libtasn1-6 4.19.0-3ubuntu0.24.10.1 Jan 16, 2026
libtasn1-bin · Ubuntu 20.04 LTS (focal) 4.16.0-2ubuntu0.1 libtasn1-bin 4.16.0-2ubuntu0.1 Feb 10, 2025
libtasn1-bin · Ubuntu 22.04.1 LTS (jammy) 4.18.0-4ubuntu0.1 libtasn1-bin 4.18.0-4ubuntu0.1 Feb 10, 2025
libtasn1-bin · Ubuntu 24.04.5 LTS (noble) 4.19.0-3ubuntu0.24.04.1 libtasn1-bin 4.19.0-3ubuntu0.24.04.1 Feb 10, 2025
libtasn1-bin · Ubuntu 24.10 (oracular) 4.19.0-3ubuntu0.24.10.1 libtasn1-bin 4.19.0-3ubuntu0.24.10.1 Jan 16, 2026
libtasn1-debuginfo · amzn 2023 4.19.0-1.amzn2023.0.5 ALAS2023-2025-989 May 21, 2025
libtasn1-debugsource · amzn 2023 4.19.0-1.amzn2023.0.5 ALAS2023-2025-989 May 21, 2025
libtasn1-devel · RHEL 8 0:4.13-5.el8_10 RHSA-2025:4049 Apr 23, 2025
libtasn1-devel · RHEL 9 0:4.16.0-9.el9 RHSA-2025:7077 May 13, 2025
libtasn1-devel · almalinux 8 4.13-5.el8_10 ALSA-2025:4049 Apr 22, 2025
libtasn1-devel · almalinux 9 4.16.0-9.el9 ALSA-2025:7077 May 13, 2025
libtasn1-devel · amzn 2023 4.19.0-1.amzn2023.0.5 ALAS2023-2025-989 May 21, 2025
libtasn1-devel · ol 8 0:4.13-5.el8_10 ELSA-2025-4049 Apr 21, 2025
libtasn1-devel · ol 9 0:4.16.0-9.el9 ELSA-2025-7077 May 16, 2025
libtasn1-tools · RHEL 8 0:4.13-5.el8_10 RHSA-2025:4049 Apr 23, 2025
libtasn1-tools · RHEL 9 0:4.16.0-9.el9 RHSA-2025:7077 May 13, 2025
libtasn1-tools · almalinux 8 4.13-5.el8_10 ALSA-2025:4049 Apr 22, 2025
libtasn1-tools · almalinux 9 4.16.0-9.el9 ALSA-2025:7077 May 13, 2025
libtasn1-tools · amzn 2023 4.19.0-1.amzn2023.0.5 ALAS2023-2025-989 May 21, 2025
libtasn1-tools · ol 8 0:4.13-5.el8_10 ELSA-2025-4049 Apr 21, 2025
libtasn1-tools · ol 9 0:4.16.0-9.el9 ELSA-2025-7077 May 16, 2025
libtasn1-tools-debuginfo · amzn 2023 4.19.0-1.amzn2023.0.5 ALAS2023-2025-989 May 21, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.