# CVE-2021-46848: libtasn1: A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing...

CVE-2021-46848 is fixed in 8 products on 1 platform, first by DEBIAN-CVE-2021-46848, released October 24, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2021-46848
- Priority: High
- CVSS: 9.1 (Moderate)
- EPSS: 0.0282
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 24, 2022

## Description

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  Security Fix(es):  * libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libtasn1 RHEL 8 | 0:4.13-4.el8_7 | [RHSA-2023:0116](https://patchblox.com/security/data/fix/linux/rhsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1 RHEL 9 | 0:4.16.0-8.el9_1 | [RHSA-2023:0343](https://patchblox.com/security/data/fix/linux/rhsa-2023-0343.md) | Jan 23, 2023 |
| Linux | libtasn1 almalinux 8 | 4.13-4.el8_7 | [ALSA-2023:0116](https://patchblox.com/security/data/fix/linux/alsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1 almalinux 9 | 4.16.0-8.el9_1 | [ALSA-2023:0343](https://patchblox.com/security/data/fix/linux/alsa-2023-0343.md) | Jan 23, 2023 |
| Linux | libtasn1 amzn 2023 | 4.19.0-1.amzn2023.0.1 | [ALAS2023-2023-201](https://patchblox.com/security/data/fix/linux/alas2023-2023-201.md) | Jun 5, 2023 |
| Linux | libtasn1 ol 8 | 0:4.13-4.el8_7 | [ELSA-2023-0116](https://patchblox.com/security/data/fix/linux/elsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1 ol 9 | 0:4.16.0-8.el9_1 | [ELSA-2023-0343](https://patchblox.com/security/data/fix/linux/elsa-2023-0343.md) | Jan 25, 2023 |
| Linux | libtasn1 rocky 8 | 0:4.13-4.el8_7 | [RLSA-2023:0116](https://patchblox.com/security/data/fix/linux/rlsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1 rocky 9 | 0:4.16.0-8.el9_1 | [RLSA-2023:0343](https://patchblox.com/security/data/fix/linux/rlsa-2023-0343.md) | Jan 23, 2023 |
| Linux | libtasn1-6 Debian 12.15 (bookworm) | 4.19.0-2 | [DEBIAN-CVE-2021-46848](https://patchblox.com/security/data/fix/linux/debian-cve-2021-46848.md) | Oct 24, 2022 |
| Linux | libtasn1-6 Debian 13.5 (trixie) | 4.19.0-2 | [DEBIAN-CVE-2021-46848](https://patchblox.com/security/data/fix/linux/debian-cve-2021-46848.md) | Oct 24, 2022 |
| Linux | libtasn1-6 Debian 14 | 4.19.0-2 | [DEBIAN-CVE-2021-46848](https://patchblox.com/security/data/fix/linux/debian-cve-2021-46848.md) | Oct 24, 2022 |
| Linux | libtasn1-6 Ubuntu 18.04.6 LTS (bionic) | 4.13-2ubuntu0.1~esm1 | [libtasn1-6 4.13-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtasn1-6-4.13-2ubuntu0.1-esm1.md) | Jan 7, 2026 |
| Linux | libtasn1-6 Ubuntu 20.04 LTS (focal) | 4.16.0-2ubuntu0.1+esm1 | [libtasn1-6 4.16.0-2ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtasn1-6-4.16.0-2ubuntu0.1-esm1.md) | Jan 7, 2026 |
| Linux | libtasn1-6 Ubuntu 22.04.1 LTS (jammy) | 4.18.0-4ubuntu0.2 | [libtasn1-6 4.18.0-4ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtasn1-6-4.18.0-4ubuntu0.2.md) | Jan 7, 2026 |
| Linux | libtasn1-bin Ubuntu 18.04.6 LTS (bionic) | 4.13-2ubuntu0.1~esm1 | [libtasn1-bin 4.13-2ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtasn1-bin-4.13-2ubuntu0.1-esm1.md) | Jan 7, 2026 |
| Linux | libtasn1-bin Ubuntu 20.04 LTS (focal) | 4.16.0-2ubuntu0.1+esm1 | [libtasn1-bin 4.16.0-2ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtasn1-bin-4.16.0-2ubuntu0.1-esm1.md) | Jan 7, 2026 |
| Linux | libtasn1-bin Ubuntu 22.04.1 LTS (jammy) | 4.18.0-4ubuntu0.2 | [libtasn1-bin 4.18.0-4ubuntu0.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtasn1-bin-4.18.0-4ubuntu0.2.md) | Jan 7, 2026 |
| Linux | libtasn1-debuginfo amzn 2023 | 4.19.0-1.amzn2023.0.1 | [ALAS2023-2023-201](https://patchblox.com/security/data/fix/linux/alas2023-2023-201.md) | Jun 5, 2023 |
| Linux | libtasn1-debugsource amzn 2023 | 4.19.0-1.amzn2023.0.1 | [ALAS2023-2023-201](https://patchblox.com/security/data/fix/linux/alas2023-2023-201.md) | Jun 5, 2023 |
| Linux | libtasn1-devel RHEL 8 | 0:4.13-4.el8_7 | [RHSA-2023:0116](https://patchblox.com/security/data/fix/linux/rhsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1-devel RHEL 9 | 0:4.16.0-8.el9_1 | [RHSA-2023:0343](https://patchblox.com/security/data/fix/linux/rhsa-2023-0343.md) | Jan 23, 2023 |
| Linux | libtasn1-devel almalinux 8 | 4.13-4.el8_7 | [ALSA-2023:0116](https://patchblox.com/security/data/fix/linux/alsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1-devel almalinux 9 | 4.16.0-8.el9_1 | [ALSA-2023:0343](https://patchblox.com/security/data/fix/linux/alsa-2023-0343.md) | Jan 23, 2023 |
| Linux | libtasn1-devel amzn 2023 | 4.19.0-1.amzn2023.0.1 | [ALAS2023-2023-201](https://patchblox.com/security/data/fix/linux/alas2023-2023-201.md) | Jun 5, 2023 |
| Linux | libtasn1-devel ol 8 | 0:4.13-4.el8_7 | [ELSA-2023-0116](https://patchblox.com/security/data/fix/linux/elsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1-devel ol 9 | 0:4.16.0-8.el9_1 | [ELSA-2023-0343](https://patchblox.com/security/data/fix/linux/elsa-2023-0343.md) | Jan 25, 2023 |
| Linux | libtasn1-tools RHEL 8 | 0:4.13-4.el8_7 | [RHSA-2023:0116](https://patchblox.com/security/data/fix/linux/rhsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1-tools RHEL 9 | 0:4.16.0-8.el9_1 | [RHSA-2023:0343](https://patchblox.com/security/data/fix/linux/rhsa-2023-0343.md) | Jan 23, 2023 |
| Linux | libtasn1-tools almalinux 8 | 4.13-4.el8_7 | [ALSA-2023:0116](https://patchblox.com/security/data/fix/linux/alsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1-tools almalinux 9 | 4.16.0-8.el9_1 | [ALSA-2023:0343](https://patchblox.com/security/data/fix/linux/alsa-2023-0343.md) | Jan 23, 2023 |
| Linux | libtasn1-tools amzn 2023 | 4.19.0-1.amzn2023.0.1 | [ALAS2023-2023-201](https://patchblox.com/security/data/fix/linux/alas2023-2023-201.md) | Jun 5, 2023 |
| Linux | libtasn1-tools ol 8 | 0:4.13-4.el8_7 | [ELSA-2023-0116](https://patchblox.com/security/data/fix/linux/elsa-2023-0116.md) | Jan 12, 2023 |
| Linux | libtasn1-tools ol 9 | 0:4.16.0-8.el9_1 | [ELSA-2023-0343](https://patchblox.com/security/data/fix/linux/elsa-2023-0343.md) | Jan 25, 2023 |
| Linux | libtasn1-tools-debuginfo amzn 2023 | 4.19.0-1.amzn2023.0.1 | [ALAS2023-2023-201](https://patchblox.com/security/data/fix/linux/alas2023-2023-201.md) | Jun 5, 2023 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.