Every CVE Search/ Get API key

CVE-2021-46848

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...

9.1 CriticalFix available

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

2.82%Up 1.9 points since Oct 25, 2022
90%50%10%1%

What each source reports

NVD Score used 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
CVE-2021-46848
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-193
Updated
2026-11-02
CVE List 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
CVE-2021-46848
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-193
Updated
2026-11-02
EUVDEUVD-2021-33503 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
EUVD-2021-33503
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6468-68pw-9chw 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
GHSA-6468-68pw-9chw
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125, CWE-193
Updated
2026-11-02
OSVALPINE-CVE-2021-46848 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
ALPINE-CVE-2021-46848
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVAZL-11318 9.1

CVE-2021-46848 affecting package libtasn1 for versions less than 4.19.0-1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
AZL-11318
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 28 moreShow less
OSVBELL-CVE-2021-46848 9.1

CVE-2021-46848 does not affect BellSoft software

Record
BELL-CVE-2021-46848
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
CVE-2021-46848
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-46848 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
DEBIAN-CVE-2021-46848
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-2030 9.1

libtasn1 security update

Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages.The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1,as specified by the X.680 ITU-T recommendation) parsing and structures management,and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)

Record
OESA-2022-2030
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1699 9.1

grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.

Security Fix(es):

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)

Record
OESA-2024-1699
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1700 9.1

grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.

Security Fix(es):

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)

Record
OESA-2024-1700
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1714 9.1

grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.

Security Fix(es):

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)

Record
OESA-2024-1714
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:0116 5.9

Red Hat Security Advisory: libtasn1 security update

Record
RHSA-2023:0116
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:0343 5.9

Red Hat Security Advisory: libtasn1 security update

Record
RHSA-2023:0343
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:0427 5.9

Red Hat Security Advisory: libtasn1 security update

Record
RHSA-2024:0427
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:0116 5.9

Moderate: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:0116
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:0343 5.9

Moderate: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:0343
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-46848 9.1

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Record
UBUNTU-CVE-2021-46848
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:0116 No score

Moderate: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:0116
Updated
2026-11-02
OSVALSA-2023:0343 No score

Moderate: libtasn1 security update

A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.

Security Fix(es):

  • libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:0343
Updated
2026-11-02
OSVCLSA-2023-1695406987 No score

libtasn1: Fix of CVE-2021-46848

  • CVE-2021-46848: Fix ETYPE_OK off by one array size check.
Record
CLSA-2023-1695406987
Updated
2026-11-02
OSVCLSA-2025-1746653404 No score

libtasn1: Fix of CVE-2021-46848

  • CVE-2021-46848: fix ETYPE_OK off-by-one array size check in asn1_encode_simple_der
Record
CLSA-2025-1746653404
Updated
2026-11-02
OSVCLSA-2025-1746653770 No score

libtasn1: Fix of CVE-2021-46848

  • CVE-2021-46848: fix ETYPE_OK off-by-one array size check in asn1_encode_simple_der
Record
CLSA-2025-1746653770
Updated
2026-11-02
OSVCLSA-2026-1779371632 No score

Fix CVE(s): CVE-2021-46848

  • CVE-2021-46848: Fix ETYPE_OK off by one array size check.
Record
CLSA-2026-1779371632
Updated
2026-11-02
OSVCLSA-2026-1782730098 No score

libtasn1: Fix of CVE-2021-46848

  • CVE-2018-6003: Restrict recursion depth in _asn1_decode_simple_ber() to prevent stack exhaustion DoS via crafted indefinite-length BER input.
Record
CLSA-2026-1782730098
Updated
2026-11-02
OSVCLSA-2026-1792179539 No score

libtasn1: Fix of CVE-2021-46848

  • CVE-2018-6003: Restrict recursion depth in _asn1_decode_simple_ber() to prevent stack exhaustion DoS via crafted indefinite-length BER input.
Record
CLSA-2026-1792179539
Updated
2026-11-02
OSVMGASA-2022-0414 No score

Updated libtasn1 packages fix security vulnerability

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. (CVE-2021-46848)

Record
MGASA-2022-0414
Updated
2026-11-02
OSVSUSE-SU-2022:3784-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)
Record
SUSE-SU-2022:3784-1
Updated
2026-11-02
OSVSUSE-SU-2022:3797-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

Security issue fixed:

  • CVE-2018-1000654: Fixed a denial of service in the asn1 parser (bsc#1105435).
  • CVE-2017-6891: Added safety check to fix a stack overflow issue (bsc#1040621).
  • CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)
Record
SUSE-SU-2022:3797-1
Updated
2026-11-02
OSVSUSE-SU-2022:3817-1 No score

Security update for libtasn1

This update for libtasn1 fixes the following issues:

  • CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690).
Record
SUSE-SU-2022:3817-1
Updated
2026-11-02
OSVUSN-5707-1 No score

libtasn1-6 vulnerability

It was discovered that Libtasn1 did not properly perform bounds checking. An attacker could possibly use this issue to cause a crash.

Record
USN-5707-1
Updated
2026-11-02
OSVUSN-7954-1 No score

libtasn1-6 vulnerabilities

It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content. An attacker could possibly use this issue to cause Libtasn1 to crash, resulting in a denial of service. (CVE-2025-13151)

It was discovered that Libtasn1 incorrectly handled encoding ASN.1 content. An attacker could possibly use this issue to cause Libtasn1 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-46848)

Record
USN-7954-1
Updated
2026-11-02
OSVUSN-7954-2 No score

libtasn1-6 vulnerabilities

USN-7954-1 fixed vulnerabilities in Libtasn1. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-46848 only affected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content. An attacker could possibly use this issue to cause Libtasn1 to crash, resulting in a denial of service. (CVE-2025-13151)

It was discovered that Libtasn1 incorrectly handled encoding ASN.1 content. An attacker could possibly use this issue to cause Libtasn1 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-46848)

Record
USN-7954-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libtasn1
Alpine:v3.14
 before 4.17.0-r1
4.17.0-r1
libtasn1
Alpine:v3.15
 before 4.18.0-r1
4.18.0-r1
libtasn1
Alpine:v3.16
 before 4.18.0-r1
4.18.0-r1
libtasn1
Alpine:v3.17
 before 4.19-r0
4.19-r0
libtasn1
Alpine:v3.18
 before 4.19-r0
4.19-r0
libtasn1
Alpine:v3.19
 before 4.19-r0
4.19-r0
libtasn1
Alpine:v3.20
 before 4.19-r0
4.19-r0
libtasn1
Alpine:v3.21
 before 4.19-r0
4.19-r0
libtasn1
Alpine:v3.22
 before 4.19-r0
4.19-r0
libtasn1
Alpine:v3.23
 before 4.19-r0
4.19-r0
Show 112 moreShow less
Affected packages
PackageAffectedFixed
libtasn1
Alpine:v3.24
 before 4.19-r0
4.19-r0
libtasn1
AlmaLinux:8
 before 4.13-4.el8_7
4.13-4.el8_7
libtasn1-devel
AlmaLinux:8
 before 4.13-4.el8_7
4.13-4.el8_7
libtasn1-tools
AlmaLinux:8
 before 4.13-4.el8_7
4.13-4.el8_7
libtasn1
AlmaLinux:9
 before 4.16.0-8.el9_1
4.16.0-8.el9_1
libtasn1-devel
AlmaLinux:9
 before 4.16.0-8.el9_1
4.16.0-8.el9_1
libtasn1-tools
AlmaLinux:9
 before 4.16.0-8.el9_1
4.16.0-8.el9_1
libtasn1
Azure Linux:2
 before 4.19.0-1
4.19.0-1
libtasn1
TuxCare:CentOS:7
 before 4.10-1.el7.tuxcare.els1
4.10-1.el7.tuxcare.els1
libtasn1-devel
TuxCare:CentOS:7
 before 4.10-1.el7.tuxcare.els1
4.10-1.el7.tuxcare.els1
libtasn1-tools
TuxCare:CentOS:7
 before 4.10-1.el7.tuxcare.els1
4.10-1.el7.tuxcare.els1
libtasn1
TuxCare:CentOS:8.4
 before 4.13-3.el8.tuxcare.els2
4.13-3.el8.tuxcare.els2
libtasn1-devel
TuxCare:CentOS:8.4
 before 4.13-3.el8.tuxcare.els2
4.13-3.el8.tuxcare.els2
libtasn1-tools
TuxCare:CentOS:8.4
 before 4.13-3.el8.tuxcare.els2
4.13-3.el8.tuxcare.els2
libtasn1
TuxCare:CentOS:8.5
 before 4.13-3.el8.tuxcare.els2
4.13-3.el8.tuxcare.els2
libtasn1-devel
TuxCare:CentOS:8.5
 before 4.13-3.el8.tuxcare.els2
4.13-3.el8.tuxcare.els2
libtasn1-tools
TuxCare:CentOS:8.5
 before 4.13-3.el8.tuxcare.els2
4.13-3.el8.tuxcare.els2
libtasn1-6
TuxCare:Debian:10
 before 4.13-3+tuxcare.els1
4.13-3+tuxcare.els1
libtasn1-6-dev
TuxCare:Debian:10
 before 4.13-3+tuxcare.els1
4.13-3+tuxcare.els1
libtasn1-bin
TuxCare:Debian:10
 before 4.13-3+tuxcare.els1
4.13-3+tuxcare.els1
libtasn1-doc
TuxCare:Debian:10
 before 4.13-3+tuxcare.els1
4.13-3+tuxcare.els1
libtasn1
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 4.10-1.el7.tuxcare.els2
4.10-1.el7.tuxcare.els2
libtasn1-devel
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 4.10-1.el7.tuxcare.els2
4.10-1.el7.tuxcare.els2
libtasn1-tools
TuxCare:OracleLinux:7
From an advisory covering 2 CVEs
 before 4.10-1.el7.tuxcare.els2
4.10-1.el7.tuxcare.els2
libtasn1
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 4.10-1.el7.tuxcare.els2
4.10-1.el7.tuxcare.els2
libtasn1-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 4.10-1.el7.tuxcare.els2
4.10-1.el7.tuxcare.els2
libtasn1-tools
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 4.10-1.el7.tuxcare.els2
4.10-1.el7.tuxcare.els2
libtasn1-6
Debian:12
 before 4.19.0-2
4.19.0-2
libtasn1-6
Debian:13
 before 4.19.0-2
4.19.0-2
libtasn1-6
Debian:14
 before 4.19.0-2
4.19.0-2
libtasn1-6
Debian:10
 before 4.13-3+deb10u1, plus listed versions
4.13-3
4.13-3+deb10u1
libtasn1
Mageia:8
 before 4.16.0-4.1.mga8
4.16.0-4.1.mga8
libtasn1
openEuler:20.03-LTS-SP1
 before 4.16.0-2.oe1
4.16.0-2.oe1
libtasn1
openEuler:20.03-LTS-SP3
 before 4.16.0-2.oe1
4.16.0-2.oe1
libtasn1
openEuler:22.03-LTS
 before 4.17.0-3.oe2203
4.17.0-3.oe2203
grub2
openEuler:22.03-LTS-SP1
 before 2.06-42.oe2203sp1
2.06-42.oe2203sp1
grub2
openEuler:22.03-LTS-SP3
 before 2.06-46.oe2203sp3
2.06-46.oe2203sp3
grub2
openEuler:24.03-LTS
 before 2.12-15.oe2403
2.12-15.oe2403
libtasn1-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-tools
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-devel
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-tools
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1-debugsource
Red Hat:rhel_eus:8.6::appstream
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1-devel
Red Hat:rhel_eus:8.6::appstream
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1-tools
Red Hat:rhel_eus:8.6::appstream
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1-tools-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1
Red Hat:rhel_eus:8.6::baseos
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1-debuginfo
Red Hat:rhel_eus:8.6::baseos
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1-debugsource
Red Hat:rhel_eus:8.6::baseos
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1-tools-debuginfo
Red Hat:rhel_eus:8.6::baseos
 before 0:4.13-3.el8_6.1
0:4.13-3.el8_6.1
libtasn1
Rocky Linux:8
 before 0:4.13-4.el8_7
0:4.13-4.el8_7
libtasn1
Rocky Linux:9
 before 0:4.16.0-8.el9_1
0:4.16.0-8.el9_1
libtasn1
SUSE:Linux Enterprise Micro 5.3
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server 15-LTSS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 15
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Manager Proxy 4.1
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Manager Retail Branch Server 4.1
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Manager Server 4.1
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Micro 5.1
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Micro 5.2
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Enterprise Storage 6
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Enterprise Storage 7
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
openSUSE:Leap Micro 5.2
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
openSUSE:Leap 15.3
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
openSUSE:Leap 15.4
 before 4.13-150000.4.8.1
4.13-150000.4.8.1
libtasn1
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 3.7-13.7.1
3.7-13.7.1
libtasn1
SUSE:OpenStack Cloud 9
 before 4.9-3.13.1
4.9-3.13.1
libtasn1
SUSE:OpenStack Cloud Crowbar 9
 before 4.9-3.13.1
4.9-3.13.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 4.9-3.13.1
4.9-3.13.1
libtasn1
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 4.9-3.13.1
4.9-3.13.1
libtasn1
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 4.9-3.13.1
4.9-3.13.1
libtasn1
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 4.9-3.13.1
4.9-3.13.1
libtasn1
SUSE:Linux Enterprise Server 12 SP5
 before 4.9-3.13.1
4.9-3.13.1
libtasn1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 4.9-3.13.1
4.9-3.13.1
libtasn1-6
Ubuntu:Pro:14.04:LTS
 before 3.4-3ubuntu0.6+esm1, plus listed versions
3.3-23.4-23.4-33.4-3ubuntu0.13.4-3ubuntu0.2
Show 4 moreShow less
3.4-3ubuntu0.33.4-3ubuntu0.43.4-3ubuntu0.53.4-3ubuntu0.6
3.4-3ubuntu0.6+esm1
libtasn1-6
Ubuntu:Pro:16.04:LTS
 before 4.7-3ubuntu0.16.04.3+esm3, plus listed versions
4.5-24.7-24.7-34.7-3ubuntu0.16.04.14.7-3ubuntu0.16.04.24.7-3ubuntu0.16.04.34.7-3ubuntu0.16.04.3+esm2
4.7-3ubuntu0.16.04.3+esm3
libtasn1-6
Ubuntu:Pro:18.04:LTS
 before 4.13-2ubuntu0.1~esm1, plus listed versions
4.12-2.14.12-34.13-2
4.13-2ubuntu0.1~esm1
libtasn1-6
Ubuntu:Pro:20.04:LTS
 before 4.16.0-2ubuntu0.1+esm1, plus listed versions
4.14-34.15.0-24.16.0-24.16.0-2ubuntu0.1
4.16.0-2ubuntu0.1+esm1
libtasn1-6
Ubuntu:22.04:LTS
 before 4.18.0-4ubuntu0.2, plus listed versions
4.16.0-24.16.0-2build14.17.0-24.18.0-34.18.0-44.18.0-4build14.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
libtasn1-6
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 4.18.0-4ubuntu0.2, plus listed versions
4.16.0-24.16.0-2build14.17.0-24.18.0-34.18.0-44.18.0-4build14.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
libtasn1-6
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 4.19.0-3ubuntu0.24.04.2, plus listed versions
4.19.0-34.19.0-3build14.19.0-3ubuntu0.24.04.1
4.19.0-3ubuntu0.24.04.2
libtasn1-6
Ubuntu:25.10
From an advisory covering 2 CVEs
 before 4.20.0-2ubuntu0.25.10.1, plus listed versions
4.20.0-24.20.0-2build1
4.20.0-2ubuntu0.25.10.1
libtasn1-6
Ubuntu:Pro:16.04:LTS
 before 4.7-3ubuntu0.16.04.3+esm4, plus listed versions
4.5-24.7-24.7-34.7-3ubuntu0.16.04.14.7-3ubuntu0.16.04.24.7-3ubuntu0.16.04.34.7-3ubuntu0.16.04.3+esm24.7-3ubuntu0.16.04.3+esm3
4.7-3ubuntu0.16.04.3+esm4

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-46848 is a critical vulnerability (CVSS 9.1) in Gnu Libtasn1, published October 24, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.82%, the 86th percentile. Fixed in libtasn1 4.17.0-r1.

References

Show 56 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open