{"id":"CVE-2021-46848","aliases":["ALPINE-CVE-2021-46848","ALSA-2023:0116","ALSA-2023:0343","AZL-11318","BELL-CVE-2021-46848","CLSA-2023-1695406987","CLSA-2025-1746653404","CLSA-2025-1746653770","CLSA-2026-1779371632","CLSA-2026-1782730098","CLSA-2026-1792179539","DEBIAN-CVE-2021-46848","DLA-3263-1","EUVD-2021-33503","GHSA-6468-68pw-9chw","MGASA-2022-0414","OESA-2022-2030","OESA-2024-1699","OESA-2024-1700","OESA-2024-1714","RHSA-2023:0116","RHSA-2023:0343","RHSA-2024:0427","RLSA-2023:0116","RLSA-2023:0343","SUSE-SU-2022:3784-1","SUSE-SU-2022:3797-1","SUSE-SU-2022:3817-1","UBUNTU-CVE-2021-46848","USN-5707-1","USN-7954-1","USN-7954-2"],"status":"published","title":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02843,"percentile":0.86856,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-193"],"published":"2022-10-24T00:00:00Z","modified":"2026-10-29T11:31:22Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"libtasn1","fixed_in":["4.17.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libtasn1","fixed_in":["4.18.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libtasn1","fixed_in":["4.18.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libtasn1","fixed_in":["4.19-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtasn1","fixed_in":["4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtasn1-devel","fixed_in":["4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtasn1-tools","fixed_in":["4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtasn1","fixed_in":["4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtasn1-devel","fixed_in":["4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtasn1-tools","fixed_in":["4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libtasn1","fixed_in":["4.19.0-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtasn1","fixed_in":["4.10-1.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtasn1-devel","fixed_in":["4.10-1.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtasn1-tools","fixed_in":["4.10-1.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libtasn1","fixed_in":["4.13-3.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libtasn1-devel","fixed_in":["4.13-3.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"libtasn1-tools","fixed_in":["4.13-3.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libtasn1","fixed_in":["4.13-3.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libtasn1-devel","fixed_in":["4.13-3.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"libtasn1-tools","fixed_in":["4.13-3.el8.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libtasn1-6","fixed_in":["4.13-3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libtasn1-6-dev","fixed_in":["4.13-3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libtasn1-bin","fixed_in":["4.13-3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libtasn1-doc","fixed_in":["4.13-3+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libtasn1-6","fixed_in":["4.19.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libtasn1-6","fixed_in":["4.19.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libtasn1-6","fixed_in":["4.19.0-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"libtasn1-6","fixed_in":["4.13-3+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libtasn1","fixed_in":["4.16.0-4.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libtasn1","fixed_in":["4.16.0-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libtasn1","fixed_in":["4.16.0-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libtasn1","fixed_in":["4.17.0-3.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"grub2","fixed_in":["2.06-42.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"grub2","fixed_in":["2.06-46.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"grub2","fixed_in":["2.12-15.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debuginfo","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debugsource","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-devel","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debuginfo","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debugsource","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debuginfo","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debugsource","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-devel","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debuginfo","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debugsource","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-debuginfo","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-debugsource","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-devel","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-tools","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1-debuginfo","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1-debugsource","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.13-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libtasn1","fixed_in":["0:4.13-4.el8_7"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libtasn1","fixed_in":["0:4.16.0-8.el9_1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libtasn1","fixed_in":["4.13-150000.4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libtasn1","fixed_in":["4.9-3.13.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtasn1-6","fixed_in":["3.4-3ubuntu0.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtasn1-6","fixed_in":["4.7-3ubuntu0.16.04.3+esm3","4.7-3ubuntu0.16.04.3+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtasn1-6","fixed_in":["4.13-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libtasn1-6","fixed_in":["4.16.0-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libtasn1-6","fixed_in":["4.18.0-4ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3.el8.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libtasn1-6-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libtasn1-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libtasn1-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1.el7.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-3+deb10u1"}]}],"versions":["4.13-3"]},{"source":"osv","ecosystem":"Mageia:8","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-4.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.0-3.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-42.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-46.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-15.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-4.el8_7"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-8.el9_1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7-13.7.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.13.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3ubuntu0.6+esm1"}]}],"versions":["3.3-2","3.4-2","3.4-3","3.4-3ubuntu0.1","3.4-3ubuntu0.2","3.4-3ubuntu0.3","3.4-3ubuntu0.4","3.4-3ubuntu0.5","3.4-3ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.3+esm3"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1","4.7-3ubuntu0.16.04.2","4.7-3ubuntu0.16.04.3","4.7-3ubuntu0.16.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-2ubuntu0.1~esm1"}]}],"versions":["4.12-2.1","4.12-3","4.13-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-2ubuntu0.1+esm1"}]}],"versions":["4.14-3","4.15.0-2","4.16.0-2","4.16.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-4ubuntu0.2"}]}],"versions":["4.16.0-2","4.16.0-2build1","4.17.0-2","4.18.0-3","4.18.0-4","4.18.0-4build1","4.18.0-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.3+esm3"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1","4.7-3ubuntu0.16.04.2","4.7-3ubuntu0.16.04.3","4.7-3ubuntu0.16.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-4ubuntu0.2"}]}],"versions":["4.16.0-2","4.16.0-2build1","4.17.0-2","4.18.0-3","4.18.0-4","4.18.0-4build1","4.18.0-4ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3ubuntu0.24.04.2"}]}],"versions":["4.19.0-3","4.19.0-3build1","4.19.0-3ubuntu0.24.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-2ubuntu0.25.10.1"}]}],"versions":["4.20.0-2","4.20.0-2build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3ubuntu0.6+esm1"}]}],"versions":["3.3-2","3.4-2","3.4-3","3.4-3ubuntu0.1","3.4-3ubuntu0.2","3.4-3ubuntu0.3","3.4-3ubuntu0.4","3.4-3ubuntu0.5","3.4-3ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.3+esm4"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1","4.7-3ubuntu0.16.04.2","4.7-3ubuntu0.16.04.3","4.7-3ubuntu0.16.04.3+esm2","4.7-3ubuntu0.16.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-2ubuntu0.1~esm1"}]}],"versions":["4.12-2.1","4.12-3","4.13-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-2ubuntu0.1+esm1"}]}],"versions":["4.14-3","4.15.0-2","4.16.0-2","4.16.0-2ubuntu0.1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"libtasn1"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://gitlab.com/gnutls/libtasn1/-/issues/32","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugs.gentoo.org/866237","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20221118-0006/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46848","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2"},{"url":"https://security.netapp.com/advisory/ntap-20221118-0006"},{"url":"https://github.com/advisories/GHSA-6468-68pw-9chw"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-46848","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46848","tags":["report"]},{"url":"https://bugzilla.redhat.com/2140058","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0116.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0343","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0343.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-46848","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1695406987.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2025-1746653404.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2025-1746653770.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1779371632.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1782730098.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792179539.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-46848","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0414.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31039","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UOQWW4AUK2TNVOVQ3OANN2IEBVJFBHJ4/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5707-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2030","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1699","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1700","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1714","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140058","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0116.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46848","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0343.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0427","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0427.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0116","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0343","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223784-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204690","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-46848","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223797-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040621","tags":["report"]},{"url":"https://bugzilla.suse.com/1105435","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000654","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223817-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-46848","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7954-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7954-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-13151","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T00:00:00Z","modified":"2026-10-14T12:12:15.924Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-193"],"updated_at":"2026-11-02T14:33:02.930115Z"}],"euvd":[{"id":"EUVD-2021-33503","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T00:00:00Z","modified":"2026-10-14T12:12:15Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T17:27:15.969628Z"}],"ghsa":[{"id":"GHSA-6468-68pw-9chw","title":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T19:00:18Z","modified":"2026-10-14T15:31:18Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125","CWE-193"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T14:15:49.973Z","modified":"2026-10-14T13:17:13.013Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-193"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"ALPINE-CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T14:15:49.973Z","modified":"2026-10-23T17:17:56.233399965Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-11318","title":"CVE-2021-46848 affecting package libtasn1 for versions less than 4.19.0-1","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T14:15:49Z","modified":"2026-04-21T04:21:59.641239Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"BELL-CVE-2021-46848","title":"CVE-2021-46848 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:24.815123Z","modified":"2026-01-26T09:46:59.694024Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T14:15:49.973Z","modified":"2026-10-20T14:31:43.624647398Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:22.18434Z"},{"id":"DEBIAN-CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-24T14:15:49.973Z","modified":"2026-10-15T09:47:30.409326091Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2022-2030","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages.The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1,as specified by the X.680 ITU-T recommendation) parsing and structures management,and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)","status":"published","published":"2022-10-28T11:05:20Z","modified":"2026-08-18T01:17:20.138916854Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2024-1699","title":"grub2 security update","description":"GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)","status":"published","published":"2024-06-07T11:07:10Z","modified":"2026-08-18T01:17:23.436316188Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1700","title":"grub2 security update","description":"GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)","status":"published","published":"2024-06-07T11:07:10Z","modified":"2026-08-18T01:17:23.255557612Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1714","title":"grub2 security update","description":"GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.\r\n\r\nSecurity Fix(es):\r\n\r\nGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)","status":"published","published":"2024-06-14T11:07:10Z","modified":"2026-08-18T01:17:24.069242817Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2023:0116","title":"Red Hat Security Advisory: libtasn1 security update","status":"published","published":"2024-09-16T09:54:47Z","modified":"2026-06-26T12:22:18.883970727Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:0343","title":"Red Hat Security Advisory: libtasn1 security update","status":"published","published":"2024-09-16T09:54:57Z","modified":"2026-06-26T12:22:30.18827839Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2024:0427","title":"Red Hat Security Advisory: libtasn1 security update","status":"published","published":"2024-09-16T09:55:05Z","modified":"2026-06-26T12:21:19.460629057Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RLSA-2023:0116","title":"Moderate: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\n\nSecurity Fix(es):\n\n* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-12T08:25:44Z","modified":"2026-02-04T08:15:05.632978Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0343","title":"Moderate: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\n\nSecurity Fix(es):\n\n* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T14:30:54Z","modified":"2026-02-04T11:00:07.796014Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-46848","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.","status":"published","published":"2022-10-25T00:00:00Z","modified":"2026-04-22T13:00:38.989006Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:30.277322Z"},{"id":"ALSA-2023:0116","title":"Moderate: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\n\nSecurity Fix(es):\n\n* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2026-10-29T11:01:58.190395506Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:0343","title":"Moderate: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\n\nSecurity Fix(es):\n\n* libtasn1: Out-of-bound access in ETYPE_OK (CVE-2021-46848)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T00:00:00Z","modified":"2026-10-29T11:31:22.660239134Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2023-1695406987","title":"libtasn1: Fix of CVE-2021-46848","description":"- CVE-2021-46848: Fix ETYPE_OK off by one array size check.","status":"published","published":"2023-09-22T18:23:11Z","modified":"2026-06-01T00:33:17.09249048Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2025-1746653404","title":"libtasn1: Fix of CVE-2021-46848","description":"- CVE-2021-46848: fix ETYPE_OK off-by-one array size check in\n  asn1_encode_simple_der","status":"published","published":"2025-05-07T21:30:09Z","modified":"2026-06-01T00:33:21.183121873Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1746653770","title":"libtasn1: Fix of CVE-2021-46848","description":"- CVE-2021-46848: fix ETYPE_OK off-by-one array size check in\n  asn1_encode_simple_der","status":"published","published":"2025-05-07T21:36:15Z","modified":"2026-06-01T00:33:19.994985586Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1779371632","title":"Fix CVE(s): CVE-2021-46848","description":"   * CVE-2021-46848: Fix ETYPE_OK off by one array size check.","status":"published","published":"2026-05-22T22:59:46Z","modified":"2026-06-04T10:04:11.724266Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1782730098","title":"libtasn1: Fix of CVE-2021-46848","description":"- CVE-2018-6003: Restrict recursion depth in _asn1_decode_simple_ber()\n  to prevent stack exhaustion DoS via crafted indefinite-length BER input.","status":"published","published":"2026-06-29T10:48:33Z","modified":"2026-10-26T09:43:20.203692079Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1792179539","title":"libtasn1: Fix of CVE-2021-46848","description":"- CVE-2018-6003: Restrict recursion depth in _asn1_decode_simple_ber()\n  to prevent stack exhaustion DoS via crafted indefinite-length BER input.","status":"published","published":"2026-10-16T19:39:11Z","modified":"2026-10-26T09:43:40.053276735Z","updated_at":"2026-11-02T15:43:51.747192Z"},{"id":"DLA-3263-1","title":"libtasn1-6 - security update","status":"published","published":"2023-01-09T00:00:00Z","modified":"2026-03-09T01:22:34.273046Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2022-0414","title":"Updated libtasn1 packages fix security vulnerability","description":"GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check\nthat affects asn1_encode_simple_der. (CVE-2021-46848)\n","status":"published","published":"2022-11-08T19:44:28Z","modified":"2026-04-16T04:42:39.657120476Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2022:3784-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\n- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)\n","status":"published","published":"2022-10-26T16:04:03Z","modified":"2026-02-04T02:28:14.319037Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3797-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-1000654: Fixed a denial of service in the asn1 parser (bsc#1105435).\n- CVE-2017-6891: Added safety check to fix a stack overflow issue (bsc#1040621).\n- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)\n","status":"published","published":"2022-10-27T12:34:13Z","modified":"2026-02-04T03:17:02.578255Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3817-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\n- CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690). \n","status":"published","published":"2022-10-31T11:05:39Z","modified":"2026-02-04T02:41:34.057528Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5707-1","title":"libtasn1-6 vulnerability","description":"It was discovered that Libtasn1 did not properly perform bounds\nchecking. An attacker could possibly use this issue to cause a\ncrash.\n","status":"published","published":"2022-10-31T14:57:35Z","modified":"2026-06-25T13:31:31.817811716Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-7954-1","title":"libtasn1-6 vulnerabilities","description":"It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content.\nAn attacker could possibly use this issue to cause Libtasn1 to crash,\nresulting in a denial of service. (CVE-2025-13151)\n\nIt was discovered that Libtasn1 incorrectly handled encoding ASN.1 content.\nAn attacker could possibly use this issue to cause Libtasn1 to crash,\nresulting in a denial of service. This issue only affected Ubuntu 22.04\nLTS. (CVE-2021-46848)","status":"published","published":"2026-01-12T13:52:51Z","modified":"2026-04-22T11:04:31.475896Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7954-2","title":"libtasn1-6 vulnerabilities","description":"USN-7954-1 fixed vulnerabilities in Libtasn1. This update provides the\ncorresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-46848 only affected Ubuntu\n14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that Libtasn1 incorrectly handled decoding ASN.1\n content. An attacker could possibly use this issue to cause Libtasn1 to\n crash, resulting in a denial of service. (CVE-2025-13151)\n\n It was discovered that Libtasn1 incorrectly handled encoding ASN.1\n content. An attacker could possibly use this issue to cause Libtasn1 to\n crash, resulting in a denial of service. This issue only affected\n Ubuntu 22.04 LTS. (CVE-2021-46848)","status":"published","published":"2026-02-10T19:24:41Z","modified":"2026-06-25T13:32:31.67804644Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}