Every CVE Search/ Get API key

CVE-2012-1569

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS...

5.0 MediumFix available

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.

Exploit likelihood

4.41%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.

Record
CVE-2012-1569
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.

Record
CVE-2012-1569
Updated
2026-11-02
EUVDEUVD-2012-1587 No score

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.

Record
EUVD-2012-1587
Updated
2026-11-03
GitHub AdvisoriesGHSA-jcv4-2hjq-vv2c No score

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS...

The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.

Record
GHSA-jcv4-2hjq-vv2c
Updated
2026-11-02
OSVopenSUSE-SU-2024:10105-1 No score

gnutls-3.4.15-1.1 on GA media

These are all security issues fixed in the gnutls-3.4.15-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10105-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libtasn1-3
Debian:6.0
 before 2.7-1+squeeze+1, plus listed versions
2.7-1
2.7-1+squeeze+1
libtasn1
Red Hat:enterprise_linux:6::client
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-devel
Red Hat:enterprise_linux:6::client
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-tools
Red Hat:enterprise_linux:6::client
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1
Red Hat:enterprise_linux:6::computenode
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-tools
Red Hat:enterprise_linux:6::computenode
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1
Red Hat:enterprise_linux:6::server
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
Show 20 moreShow less
Affected packages
PackageAffectedFixed
libtasn1-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-devel
Red Hat:enterprise_linux:6::server
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-tools
Red Hat:enterprise_linux:6::server
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1
Red Hat:enterprise_linux:6::workstation
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
libtasn1-tools
Red Hat:enterprise_linux:6::workstation
 before 0:2.3-3.el6_2.1
0:2.3-3.el6_2.1
gnutls
Red Hat:enterprise_linux:5::client
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-utils
Red Hat:enterprise_linux:5::client
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-devel
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
gnutls-utils
Red Hat:enterprise_linux:5::server
 before 0:1.4.1-7.el5_8.2
0:1.4.1-7.el5_8.2
rhev-hypervisor6
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.2-20120423.1.el6_2
0:6.2-20120423.1.el6_2
rhev-hypervisor6-tools
Red Hat:enterprise_linux:6::hypervisor
 before 0:6.2-20120423.1.el6_2
0:6.2-20120423.1.el6_2
gnutls
openSUSE:Tumbleweed
 before 3.4.15-1.1
3.4.15-1.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-1569 is a medium vulnerability (CVSS 5.0) in Gnu Gnutls, published March 24, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.41%, the 91st percentile. Fixed in libtasn1-3 2.7-1+squeeze+1.

References

Show 60 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open