Every CVE Search/ Get API key

CVE-2025-13151

CVE-2025-13151

7.5 HighFix available

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.37%Up 1.3 points since Jan 8, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

CVE-2025-13151

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
CVE-2025-13151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2025-206262 7.5

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
EUVD-2025-206262
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-f433-vfwr-65r3 7.5

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size...

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
GHSA-f433-vfwr-65r3
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 7.5

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
CVE-2025-13151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2025-13151 7.5

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
ALPINE-CVE-2025-13151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-13151 7.5
Record
BELL-CVE-2025-13151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 40 moreShow less
OSV 7.5

CVE-2025-13151

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
CVE-2025-13151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-13151 7.5

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
DEBIAN-CVE-2025-13151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1178 7.5

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Record
OESA-2026-1178
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1179 7.5

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Record
OESA-2026-1179
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1180 7.5

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Record
OESA-2026-1180
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1181 7.5

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Record
OESA-2026-1181
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1182 7.5

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Record
OESA-2026-1182
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1183 7.5

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Record
OESA-2026-1183
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1232 7.5

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Record
OESA-2026-1232
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:28235 5.9

Red Hat Security Advisory: libtasn1 security update

Record
RHSA-2026:28235
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:28253 5.9

Red Hat Security Advisory: libtasn1 security update

Record
RHSA-2026:28253
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:36728 5.9

Red Hat Security Advisory: libtasn1 security update

Record
RHSA-2026:36728
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:7500 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:7500
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:28235 5.9

Low: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:28235
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:28253 5.9

Low: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:28253
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:36728 5.9

Low: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:36728
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-ALPINE-319-CVE-2025-13151 5.9

CVE-2025-13151 in libtasn1 - Patched by Root

Root has patched CVE-2025-13151 in the libtasn1 package for Root:Alpine:3.19. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-319-CVE-2025-13151
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-13151 5.9

CVE-2025-13151 in rootio-libtasn1-6 - Patched by Root

Root has patched CVE-2025-13151 in the rootio-libtasn1-6 package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-13151
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-13151 5.9

CVE-2025-13151 in libtasn1-6 - Patched by Root

Root has patched CVE-2025-13151 in the libtasn1-6 package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-13151
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-13151 7.5

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
UBUNTU-CVE-2025-13151
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:28235 No score

Low: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:28235
Updated
2026-11-02
OSVALSA-2026:28253 No score

Low: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:28253
Updated
2026-11-02
OSVALSA-2026:36728 No score

Low: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:36728
Updated
2026-11-02
OSVAZL-73664 No score

CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
AZL-73664
Updated
2026-11-05
OSVAZL-74006 No score

CVE-2025-13151 affecting package gnutls for versions less than 3.8.3-8

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
AZL-74006
Updated
2026-11-05
OSVAZL-74046 No score

CVE-2025-13151 affecting package gnutls for versions less than 3.7.11-6

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
AZL-74046
Updated
2026-11-02
OSVAZL-74070 No score

CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

Record
AZL-74070
Updated
2026-11-02
OSVCLSA-2026-1776184861 No score

libtasn1: Fix of CVE-2025-13151

  • CVE-2025-13151: fix stack-based buffer overflow in asn1_expand_octet_string, _asn1_expand_object_id
Record
CLSA-2026-1776184861
Updated
2026-11-02
OSVCLSA-2026-1776328800 No score

libtasn1: Fix of CVE-2025-13151

  • CVE-2025-13151: fix stack-based buffer overflow in asn1_expand_octet_string, _asn1_expand_object_id
Record
CLSA-2026-1776328800
Updated
2026-11-02
OSVMGASA-2026-0007 No score

Updated libtasn1 packages fix security vulnerability

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string. (CVE-2025-13151)

Record
MGASA-2026-0007
Updated
2026-11-02
OSVopenSUSE-SU-2026:10033-1 No score

libtasn1-6-32bit-4.21.0-1.1 on GA media

These are all security issues fixed in the libtasn1-6-32bit-4.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10033-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20470-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in asn1_expend_octet_string (bsc#1256341).
Record
openSUSE-SU-2026:20470-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-13151 No score

CVE-2025-13151 in rootio-libtasn1-6 - Patched by Root

Root has patched CVE-2025-13151 in the rootio-libtasn1-6 package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2025-13151
Updated
2026-11-02
OSVSUSE-SU-2026:0118-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2025-13151: stack-based buffer overflow in asn1_expend_octet_string (bsc#1256341).
Record
SUSE-SU-2026:0118-1
Updated
2026-11-02
OSVSUSE-SU-2026:0224-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2025-13151: stack-based buffer overflow in asn1_expend_octet_string (bsc#1256341).
Record
SUSE-SU-2026:0224-1
Updated
2026-11-02
OSVSUSE-SU-2026:20051-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in asn1_expend_octet_string (bsc#1256341).
Record
SUSE-SU-2026:20051-1
Updated
2026-11-02
OSVSUSE-SU-2026:20355-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in asn1_expend_octet_string (bsc#1256341).
Record
SUSE-SU-2026:20355-1
Updated
2026-11-02
OSVSUSE-SU-2026:21001-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in asn1_expend_octet_string (bsc#1256341).
Record
SUSE-SU-2026:21001-1
Updated
2026-11-02
OSVSUSE-SU-2026:21142-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in asn1_expend_octet_string (bsc#1256341).
Record
SUSE-SU-2026:21142-1
Updated
2026-11-02
OSVUSN-7954-1 No score

libtasn1-6 vulnerabilities

It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content. An attacker could possibly use this issue to cause Libtasn1 to crash, resulting in a denial of service. (CVE-2025-13151)

It was discovered that Libtasn1 incorrectly handled encoding ASN.1 content. An attacker could possibly use this issue to cause Libtasn1 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-46848)

Record
USN-7954-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libtasn1
Alpine:v3.20
 before 4.21.0-r0
4.21.0-r0
libtasn1
Alpine:v3.21
 before 4.21.0-r0
4.21.0-r0
libtasn1
Alpine:v3.22
 before 4.21.0-r0
4.21.0-r0
libtasn1
Alpine:v3.23
 before 4.21.0-r0
4.21.0-r0
libtasn1
Alpine:v3.24
 before 4.21.0-r0
4.21.0-r0
libtasn1
AlmaLinux:10
 before 4.20.0-5.el10_2
4.20.0-5.el10_2
libtasn1-devel
AlmaLinux:10
 before 4.20.0-5.el10_2
4.20.0-5.el10_2
libtasn1-tools
AlmaLinux:10
 before 4.20.0-5.el10_2
4.20.0-5.el10_2
libtasn1
AlmaLinux:9
 before 4.16.0-10.el9_8
4.16.0-10.el9_8
libtasn1-devel
AlmaLinux:9
 before 4.16.0-10.el9_8
4.16.0-10.el9_8
Show 86 moreShow less
Affected packages
PackageAffectedFixed
libtasn1-tools
AlmaLinux:9
 before 4.16.0-10.el9_8
4.16.0-10.el9_8
libtasn1
AlmaLinux:8
 before 4.13-6.el8_10
4.13-6.el8_10
libtasn1-devel
AlmaLinux:8
 before 4.13-6.el8_10
4.13-6.el8_10
libtasn1-tools
AlmaLinux:8
 before 4.13-6.el8_10
4.13-6.el8_10
libtasn1
Azure Linux:3
 before 4.19.0-3
4.19.0-3
gnutls
Azure Linux:3
 before 3.8.3-8
3.8.3-8
gnutls
Azure Linux:2
 before 3.7.11-6
3.7.11-6
libtasn1
Azure Linux:2
 before 4.19.0-3
4.19.0-3
libtasn1
Alpaquita:25
 4.20.0-r0 up to 4.21.0-r0
4.21.0-r0
libtasn1
Alpaquita:stream
 4.18.0-r0 up to 4.21.0-r0
4.21.0-r0
libtasn1
TuxCare:AlmaLinux:9.2
 before 4.16.0-9.el9.tuxcare.els2
4.16.0-9.el9.tuxcare.els2
libtasn1-devel
TuxCare:AlmaLinux:9.2
 before 4.16.0-9.el9.tuxcare.els2
4.16.0-9.el9.tuxcare.els2
libtasn1-tools
TuxCare:AlmaLinux:9.2
 before 4.16.0-9.el9.tuxcare.els2
4.16.0-9.el9.tuxcare.els2
libtasn1
TuxCare:AlmaLinux:9.6
 before 4.16.0-9.el9.tuxcare.els1
4.16.0-9.el9.tuxcare.els1
libtasn1-devel
TuxCare:AlmaLinux:9.6
 before 4.16.0-9.el9.tuxcare.els1
4.16.0-9.el9.tuxcare.els1
libtasn1-tools
TuxCare:AlmaLinux:9.6
 before 4.16.0-9.el9.tuxcare.els1
4.16.0-9.el9.tuxcare.els1
libtasn1-6
Debian:12
 All versions, plus listed versions
4.19.0-24.19.0-2+deb12u14.19.0-34.20.0-14.20.0-24.21.0-14.21.0-2
 None known
libtasn1-6
Debian:13
 before 4.20.0-2+deb13u1, plus listed versions
4.20.0-2
4.20.0-2+deb13u1
libtasn1-6
Debian:14
 before 4.21.0-2, plus listed versions
4.20.0-24.21.0-1
4.21.0-2
libtasn1
Mageia:9
 before 4.21.0-1.mga9
4.21.0-1.mga9
libtasn1
openEuler:24.03-LTS
 before 4.19.0-3.oe2403
4.19.0-3.oe2403
libtasn1
openEuler:24.03-LTS-SP1
 before 4.19.0-3.oe2403sp1
4.19.0-3.oe2403sp1
libtasn1
openEuler:24.03-LTS-SP2
 before 4.19.0-3.oe2403sp2
4.19.0-3.oe2403sp2
libtasn1
openEuler:24.03-LTS-SP3
 before 4.19.0-3.oe2403sp3
4.19.0-3.oe2403sp3
libtasn1
openEuler:22.03-LTS-SP3
 before 4.19.0-3.oe2203sp3
4.19.0-3.oe2203sp3
libtasn1
openEuler:22.03-LTS-SP4
 before 4.19.0-3.oe2203sp4
4.19.0-3.oe2203sp4
libtasn1
openEuler:20.03-LTS-SP4
 before 4.16.0-5.oe2003sp4
4.16.0-5.oe2003sp4
libtasn1-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:4.20.0-5.el10_2
0:4.20.0-5.el10_2
libtasn1-debugsource
Red Hat:enterprise_linux:10.2
 before 0:4.20.0-5.el10_2
0:4.20.0-5.el10_2
libtasn1-devel
Red Hat:enterprise_linux:10.2
 before 0:4.20.0-5.el10_2
0:4.20.0-5.el10_2
libtasn1-tools
Red Hat:enterprise_linux:10.2
 before 0:4.20.0-5.el10_2
0:4.20.0-5.el10_2
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:4.20.0-5.el10_2
0:4.20.0-5.el10_2
libtasn1
Red Hat:enterprise_linux:10.2
 before 0:4.20.0-5.el10_2
0:4.20.0-5.el10_2
libtasn1-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-devel
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-tools
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1-tools
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1
Red Hat:hummingbird:1
 before 0:4.21.0-1.1.hum1
0:4.21.0-1.1.hum1
libtasn1-devel
Red Hat:hummingbird:1
 before 0:4.21.0-1.1.hum1
0:4.21.0-1.1.hum1
libtasn1-tools
Red Hat:hummingbird:1
 before 0:4.21.0-1.1.hum1
0:4.21.0-1.1.hum1
libtasn1
Rocky Linux:10
 before 0:4.20.0-5.el10_2
0:4.20.0-5.el10_2
libtasn1
Rocky Linux:9
 before 0:4.16.0-10.el9_8
0:4.16.0-10.el9_8
libtasn1
Rocky Linux:8
 before 0:4.13-6.el8_10
0:4.13-6.el8_10
libtasn1
Root:Alpine:3.19
 before 4.20.0-r00071
4.20.0-r000714.20.0-r00072
rootio-libtasn1
Root:Alpine:3.19
 before 4.20.0-r00071
4.20.0-r000714.20.0-r00072
rootio-libtasn1-6
Root:Debian:11
 before 4.16.0-2+deb11u2.root.io.1
4.16.0-2+deb11u2.root.io.1
libtasn1-6
Root:Debian:12
 before 4.19.0-2+deb12u1.root.io.1
4.19.0-2+deb12u1.root.io.14.19.0-2+deb12u1.aikido.2
rootio-libtasn1-6
Root:Debian:12
 before 4.19.0-2+deb12u1.root.io.1
4.19.0-2+deb12u1.root.io.14.19.0-2+deb12u1.aikido.2
libtasn1
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 4.9-3.19.1
4.9-3.19.1
libtasn1
SUSE:Linux Enterprise Micro 5.3
 before 4.13-150000.4.14.1
4.13-150000.4.14.1
libtasn1
SUSE:Linux Enterprise Micro 5.4
 before 4.13-150000.4.14.1
4.13-150000.4.14.1
libtasn1
SUSE:Linux Enterprise Micro 5.5
 before 4.13-150000.4.14.1
4.13-150000.4.14.1
libtasn1
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 4.13-150000.4.14.1
4.13-150000.4.14.1
libtasn1
SUSE:Linux Enterprise Micro 5.2
 before 4.13-150000.4.14.1
4.13-150000.4.14.1
libtasn1
openSUSE:Leap 15.6
 before 4.13-150000.4.14.1
4.13-150000.4.14.1
libtasn1
SUSE:Linux Micro 6.0
 before 4.19.0-5.1
4.19.0-5.1
libtasn1
SUSE:Linux Micro 6.1
 before 4.19.0-slfo.1.1_3.1
4.19.0-slfo.1.1_3.1
libtasn1
SUSE:Linux Micro 6.2
 before 4.21.0-160000.1.1
4.21.0-160000.1.1
libtasn1
SUSE:Linux Enterprise Server 16.0
 before 4.21.0-160000.1.1
4.21.0-160000.1.1
libtasn1
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 4.21.0-160000.1.1
4.21.0-160000.1.1
libtasn1-6
Ubuntu:Pro:14.04:LTS
 before 3.4-3ubuntu0.6+esm1, plus listed versions
3.3-23.4-23.4-33.4-3ubuntu0.13.4-3ubuntu0.2
Show 4 moreShow less
3.4-3ubuntu0.33.4-3ubuntu0.43.4-3ubuntu0.53.4-3ubuntu0.6
3.4-3ubuntu0.6+esm1
libtasn1-6
Ubuntu:Pro:16.04:LTS
 before 4.7-3ubuntu0.16.04.3+esm4, plus listed versions
4.5-24.7-24.7-34.7-3ubuntu0.16.04.14.7-3ubuntu0.16.04.24.7-3ubuntu0.16.04.34.7-3ubuntu0.16.04.3+esm24.7-3ubuntu0.16.04.3+esm3
4.7-3ubuntu0.16.04.3+esm4
libtasn1-6
Ubuntu:Pro:18.04:LTS
 before 4.13-2ubuntu0.1~esm1, plus listed versions
4.12-2.14.12-34.13-2
4.13-2ubuntu0.1~esm1
libtasn1-6
Ubuntu:Pro:20.04:LTS
 before 4.16.0-2ubuntu0.1+esm1, plus listed versions
4.14-34.15.0-24.16.0-24.16.0-2ubuntu0.1
4.16.0-2ubuntu0.1+esm1
libtasn1-6
Ubuntu:22.04:LTS
 before 4.18.0-4ubuntu0.2, plus listed versions
4.16.0-24.16.0-2build14.17.0-24.18.0-34.18.0-44.18.0-4build14.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
libtasn1-6
Ubuntu:24.04:LTS
 before 4.19.0-3ubuntu0.24.04.2, plus listed versions
4.19.0-34.19.0-3build14.19.0-3ubuntu0.24.04.1
4.19.0-3ubuntu0.24.04.2
libtasn1-6
Ubuntu:25.10
 before 4.20.0-2ubuntu0.25.10.1, plus listed versions
4.20.0-24.20.0-2build1
4.20.0-2ubuntu0.25.10.1
libtasn1-6
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 4.18.0-4ubuntu0.2, plus listed versions
4.16.0-24.16.0-2build14.17.0-24.18.0-34.18.0-44.18.0-4build14.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
libtasn1-6
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 4.19.0-3ubuntu0.24.04.2, plus listed versions
4.19.0-34.19.0-3build14.19.0-3ubuntu0.24.04.1
4.19.0-3ubuntu0.24.04.2
libtasn1-6
Ubuntu:25.10
From an advisory covering 2 CVEs
 before 4.20.0-2ubuntu0.25.10.1, plus listed versions
4.20.0-24.20.0-2build1
4.20.0-2ubuntu0.25.10.1
libtasn1
openSUSE:Tumbleweed
 before 4.21.0-1.1
4.21.0-1.1
libtasn1
openSUSE:Leap 16.0
 before 4.21.0-160000.1.1
4.21.0-160000.1.1

History

History
RecordedChangedSources
affected
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-13151 is a high vulnerability (CVSS 7.5) in Gnu Libtasn1, published January 7, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.37%, the 72nd percentile. Fixed in libtasn1 4.21.0-r0.

References

Show 47 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open