{"id":"CVE-2025-13151","aliases":["ALPINE-CVE-2025-13151","ALSA-2026:28235","ALSA-2026:28253","ALSA-2026:36728","AZL-73664","AZL-74006","AZL-74046","AZL-74070","BELL-CVE-2025-13151","CLSA-2026-1776184861","CLSA-2026-1776328800","DEBIAN-CVE-2025-13151","EUVD-2025-206262","GHSA-f433-vfwr-65r3","MGASA-2026-0007","OESA-2026-1178","OESA-2026-1179","OESA-2026-1180","OESA-2026-1181","OESA-2026-1182","OESA-2026-1183","OESA-2026-1232","RHSA-2026:28235","RHSA-2026:28253","RHSA-2026:36728","RHSA-2026:7500","RLSA-2026:28235","RLSA-2026:28253","RLSA-2026:36728","ROOT-OS-ALPINE-319-CVE-2025-13151","ROOT-OS-DEBIAN-11-CVE-2025-13151","ROOT-OS-DEBIAN-12-CVE-2025-13151","ROOT-OS-DEBIAN-13-CVE-2025-13151","SUSE-SU-2026:0118-1","SUSE-SU-2026:0224-1","SUSE-SU-2026:20051-1","SUSE-SU-2026:20355-1","SUSE-SU-2026:21001-1","SUSE-SU-2026:21142-1","UBUNTU-CVE-2025-13151","USN-7954-1","openSUSE-SU-2026:10033-1","openSUSE-SU-2026:20470-1"],"status":"published","title":"CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.0137,"percentile":0.72106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-01-07T21:14:05Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.20","package":"libtasn1","fixed_in":["4.21.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libtasn1","fixed_in":["4.21.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libtasn1","fixed_in":["4.21.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libtasn1","fixed_in":["4.21.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libtasn1","fixed_in":["4.21.0-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libtasn1","fixed_in":["4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libtasn1-devel","fixed_in":["4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"libtasn1-tools","fixed_in":["4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtasn1","fixed_in":["4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtasn1-devel","fixed_in":["4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libtasn1-tools","fixed_in":["4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtasn1","fixed_in":["4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtasn1-devel","fixed_in":["4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libtasn1-tools","fixed_in":["4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libtasn1","fixed_in":["4.19.0-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"gnutls","fixed_in":["3.8.3-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gnutls","fixed_in":["3.7.11-6"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libtasn1","fixed_in":["4.19.0-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libtasn1","fixed_in":["4.21.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libtasn1","fixed_in":["4.21.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtasn1","fixed_in":["4.16.0-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtasn1-devel","fixed_in":["4.16.0-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtasn1-tools","fixed_in":["4.16.0-9.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtasn1","fixed_in":["4.16.0-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtasn1-devel","fixed_in":["4.16.0-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtasn1-tools","fixed_in":["4.16.0-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libtasn1-6","fixed_in":["4.20.0-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libtasn1-6","fixed_in":["4.21.0-2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libtasn1","fixed_in":["4.21.0-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libtasn1","fixed_in":["4.19.0-3.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libtasn1","fixed_in":["4.19.0-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"libtasn1","fixed_in":["4.19.0-3.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"libtasn1","fixed_in":["4.19.0-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"libtasn1","fixed_in":["4.19.0-3.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libtasn1","fixed_in":["4.19.0-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libtasn1","fixed_in":["4.16.0-5.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-debuginfo","fixed_in":["0:4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-debugsource","fixed_in":["0:4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-devel","fixed_in":["0:4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-tools","fixed_in":["0:4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1","fixed_in":["0:4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debuginfo","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debugsource","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-devel","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debuginfo","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debugsource","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debuginfo","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debugsource","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-devel","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debuginfo","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debugsource","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-tools-debuginfo","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libtasn1","fixed_in":["0:4.21.0-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libtasn1-devel","fixed_in":["0:4.21.0-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libtasn1-tools","fixed_in":["0:4.21.0-1.1.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"libtasn1","fixed_in":["0:4.20.0-5.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libtasn1","fixed_in":["0:4.16.0-10.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libtasn1","fixed_in":["0:4.13-6.el8_10"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"libtasn1","fixed_in":["4.20.0-r00071","4.20.0-r00072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.19","package":"rootio-libtasn1","fixed_in":["4.20.0-r00071","4.20.0-r00072"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-libtasn1-6","fixed_in":["4.16.0-2+deb11u2.root.io.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"libtasn1-6","fixed_in":["4.19.0-2+deb12u1.root.io.1","4.19.0-2+deb12u1.aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-libtasn1-6","fixed_in":["4.19.0-2+deb12u1.root.io.1","4.19.0-2+deb12u1.aikido.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libtasn1","fixed_in":["4.9-3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libtasn1","fixed_in":["4.13-150000.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libtasn1","fixed_in":["4.13-150000.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libtasn1","fixed_in":["4.13-150000.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libtasn1","fixed_in":["4.13-150000.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libtasn1","fixed_in":["4.13-150000.4.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"libtasn1","fixed_in":["4.13-150000.4.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"libtasn1","fixed_in":["4.19.0-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"libtasn1","fixed_in":["4.19.0-slfo.1.1_3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"libtasn1","fixed_in":["4.21.0-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libtasn1","fixed_in":["4.21.0-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libtasn1","fixed_in":["4.21.0-160000.1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtasn1-6","fixed_in":["3.4-3ubuntu0.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtasn1-6","fixed_in":["4.7-3ubuntu0.16.04.3+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtasn1-6","fixed_in":["4.13-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libtasn1-6","fixed_in":["4.16.0-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libtasn1-6","fixed_in":["4.18.0-4ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libtasn1-6","fixed_in":["4.19.0-3ubuntu0.24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"libtasn1-6","fixed_in":["4.20.0-2ubuntu0.25.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libtasn1","fixed_in":["4.21.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"libtasn1","fixed_in":["4.21.0-160000.1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.20","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.3-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gnutls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.11-6"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.20.0-r0"},{"fixed":"4.21.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.18.0-r0"},{"fixed":"4.21.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-9.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.19.0-2","4.19.0-2+deb12u1","4.19.0-3","4.20.0-1","4.20.0-2","4.21.0-1","4.21.0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-2+deb13u1"}]}],"versions":["4.20.0-2"]},{"source":"osv","ecosystem":"Debian:14","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-2"}]}],"versions":["4.20.0-2","4.21.0-1"]},{"source":"osv","ecosystem":"Mageia:9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-5.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libtasn1-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtasn1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtasn1-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.0-1.1.hum1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0-5.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0-10.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13-6.el8_10"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-r00071"},{"fixed":"4.20.0-r00072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.19","package":"rootio-libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-r00071"},{"fixed":"4.20.0-r00072"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-2+deb11u2.root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2+deb12u1.root.io.1"},{"fixed":"4.19.0-2+deb12u1.aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2+deb12u1.root.io.1"},{"fixed":"4.19.0-2+deb12u1.aikido.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-150000.4.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-slfo.1.1_3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-160000.1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-3ubuntu0.6+esm1"}]}],"versions":["3.3-2","3.4-2","3.4-3","3.4-3ubuntu0.1","3.4-3ubuntu0.2","3.4-3ubuntu0.3","3.4-3ubuntu0.4","3.4-3ubuntu0.5","3.4-3ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7-3ubuntu0.16.04.3+esm4"}]}],"versions":["4.5-2","4.7-2","4.7-3","4.7-3ubuntu0.16.04.1","4.7-3ubuntu0.16.04.2","4.7-3ubuntu0.16.04.3","4.7-3ubuntu0.16.04.3+esm2","4.7-3ubuntu0.16.04.3+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-2ubuntu0.1~esm1"}]}],"versions":["4.12-2.1","4.12-3","4.13-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0-2ubuntu0.1+esm1"}]}],"versions":["4.14-3","4.15.0-2","4.16.0-2","4.16.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-4ubuntu0.2"}]}],"versions":["4.16.0-2","4.16.0-2build1","4.17.0-2","4.18.0-3","4.18.0-4","4.18.0-4build1","4.18.0-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3ubuntu0.24.04.2"}]}],"versions":["4.19.0-3","4.19.0-3build1","4.19.0-3ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-2ubuntu0.25.10.1"}]}],"versions":["4.20.0-2","4.20.0-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-4ubuntu0.2"}]}],"versions":["4.16.0-2","4.16.0-2build1","4.17.0-2","4.18.0-3","4.18.0-4","4.18.0-4build1","4.18.0-4ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-3ubuntu0.24.04.2"}]}],"versions":["4.19.0-3","4.19.0-3build1","4.19.0-3ubuntu0.24.04.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libtasn1-6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.0-2ubuntu0.25.10.1"}]}],"versions":["4.20.0-2","4.20.0-2build1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libtasn1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.0-160000.1.1"}]}]}],"products":[{"vendor":"gnu","product":"libtasn1"},{"vendor":"gnutls","product":"libtasn1"}],"references":[{"url":"https://gitlab.com/gnutls/libtasn1","tags":["Product","package","article","report"]},{"url":"https://gitlab.com/gnutls/libtasn1/-/merge_requests/121","tags":["patch","Patch","fix","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2026/01/08/5","tags":["Mailing List","Patch","web"]},{"url":"https://www.kb.cert.org/vuls/id/271649","tags":["Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13151","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-f433-vfwr-65r3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-13151","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28235","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-13151","tags":["report"]},{"url":"https://bugzilla.redhat.com/2427698","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-28235.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:28253","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-28253.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:36728","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-36728.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-13151","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776184861.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776328800.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13151.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-13151","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0007.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34957","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2026/01/08/5","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1178","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1179","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1180","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1181","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1182","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1183","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1232","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2427698","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28235.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13151","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28253.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36728.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7500","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7500.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:28235","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:28253","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:36728","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260118-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256341","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13151","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260224-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620051-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620355-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621001-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621142-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-13151","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7954-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7954-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-46848","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-13151","title":"CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T21:14:05.223Z","modified":"2026-01-20T17:08:41.712Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:32:43.437394Z"}],"euvd":[{"id":"EUVD-2025-206262","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T21:14:05Z","modified":"2026-01-20T17:08:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:49.964072Z"}],"ghsa":[{"id":"GHSA-f433-vfwr-65r3","title":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size...","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-08T00:31:12Z","modified":"2026-02-02T21:30:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:06:00.828476Z"}],"nvd":[{"id":"CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T22:15:43.2Z","modified":"2026-06-17T08:33:34.88Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:11:56.616231Z"}],"osv":[{"id":"ALPINE-CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T22:15:43.2Z","modified":"2026-08-27T22:18:02.771002803Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2025-13151","status":"published","published":"2026-01-09T06:07:43.852238Z","modified":"2026-01-26T09:41:23.803879Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-13151","title":"CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T21:14:05.223Z","modified":"2026-10-28T02:30:38.180199503Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:46.024537Z"},{"id":"DEBIAN-CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T22:15:43.2Z","modified":"2026-09-01T20:05:41.053836956Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"OESA-2026-1178","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\n\nStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)","status":"published","published":"2026-01-16T11:10:12Z","modified":"2026-08-18T01:19:29.198693921Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1179","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\n\nStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)","status":"published","published":"2026-01-16T11:10:12Z","modified":"2026-08-18T01:19:28.890070016Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1180","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\n\nStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)","status":"published","published":"2026-01-16T11:10:13Z","modified":"2026-08-18T01:19:28.892745373Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1181","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\n\nStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)","status":"published","published":"2026-01-16T11:10:13Z","modified":"2026-08-18T01:19:28.893700352Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1182","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\n\nStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)","status":"published","published":"2026-01-16T11:10:13Z","modified":"2026-08-18T01:19:28.892386755Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1183","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\n\nStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)","status":"published","published":"2026-01-16T11:10:13Z","modified":"2026-08-18T01:19:28.890663856Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1232","title":"libtasn1 security update","description":"Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages. The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\r\n\r\nSecurity Fix(es):\n\nStack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)","status":"published","published":"2026-01-23T11:10:15Z","modified":"2026-08-18T01:19:31.060043026Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"RHSA-2026:28235","title":"Red Hat Security Advisory: libtasn1 security update","status":"published","published":"2026-06-24T10:08:32Z","modified":"2026-10-15T10:16:21Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:28253","title":"Red Hat Security Advisory: libtasn1 security update","status":"published","published":"2026-06-24T10:08:35Z","modified":"2026-10-15T10:16:22Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:36728","title":"Red Hat Security Advisory: libtasn1 security update","status":"published","published":"2026-07-09T10:12:47Z","modified":"2026-10-15T10:17:51Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:7500","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:09:57Z","modified":"2026-10-15T10:26:59Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RLSA-2026:28235","title":"Low: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\n\nSecurity Fix(es):\n\n* libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-24T12:05:09.232192Z","modified":"2026-06-24T12:30:05.379305331Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:28253","title":"Low: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\n\nSecurity Fix(es):\n\n* libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-24T12:03:26.635873Z","modified":"2026-06-24T12:30:05.427104946Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:36728","title":"Low: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.\n\nSecurity Fix(es):\n\n* libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-09T06:00:16.850158Z","modified":"2026-07-09T06:30:04.094929789Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"ROOT-OS-ALPINE-319-CVE-2025-13151","title":"CVE-2025-13151 in libtasn1 - Patched by Root","description":"Root has patched CVE-2025-13151 in the libtasn1 package for Root:Alpine:3.19. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:37:13Z","modified":"2026-09-29T10:15:18.362103164Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2025-13151","title":"CVE-2025-13151 in rootio-libtasn1-6 - Patched by Root","description":"Root has patched CVE-2025-13151 in the rootio-libtasn1-6 package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-03-16T07:54:22Z","modified":"2026-07-28T19:36:37.059988157Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:29.077857Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-13151","title":"CVE-2025-13151 in libtasn1-6 - Patched by Root","description":"Root has patched CVE-2025-13151 in the libtasn1-6 package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T11:15:16Z","modified":"2026-08-26T01:10:11.259673321Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:30.983521Z"},{"id":"UBUNTU-CVE-2025-13151","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-08T00:00:00Z","modified":"2026-04-22T15:30:31.745395Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"ALSA-2026:28235","title":"Low: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  \n\nSecurity Fix(es):  \n\n  * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-23T00:00:00Z","modified":"2026-10-29T11:30:20.455192466Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:28253","title":"Low: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  \n\nSecurity Fix(es):  \n\n  * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-23T00:00:00Z","modified":"2026-10-29T11:32:34.607372683Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:36728","title":"Low: libtasn1 security update","description":"A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions.  \n\nSecurity Fix(es):  \n\n  * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string (CVE-2025-13151)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-08T00:00:00Z","modified":"2026-10-29T11:02:24.170076162Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-73664","title":"CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T22:15:43Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.309973Z"},{"id":"AZL-74006","title":"CVE-2025-13151 affecting package gnutls for versions less than 3.8.3-8","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T22:15:43Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"AZL-74046","title":"CVE-2025-13151 affecting package gnutls for versions less than 3.7.11-6","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T22:15:43Z","modified":"2026-04-21T04:38:39.977683Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"AZL-74070","title":"CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.","status":"published","published":"2026-01-07T22:15:43Z","modified":"2026-04-21T04:38:39.843171Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"CLSA-2026-1776184861","title":"libtasn1: Fix of CVE-2025-13151","description":"- CVE-2025-13151: fix stack-based buffer overflow in\n  asn1_expand_octet_string, _asn1_expand_object_id","status":"published","published":"2026-04-14T16:41:06Z","modified":"2026-06-01T00:32:22.437680911Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776328800","title":"libtasn1: Fix of CVE-2025-13151","description":"- CVE-2025-13151: fix stack-based buffer overflow in\n  asn1_expand_octet_string, _asn1_expand_object_id","status":"published","published":"2026-04-16T08:40:04Z","modified":"2026-06-01T00:32:47.481271304Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"MGASA-2026-0007","title":"Updated libtasn1 packages fix security vulnerability","description":"Stack-based buffer overflow in libtasn1 version: v4.20.0. The function\nfails to validate the size of input data resulting in a buffer overflow\nin asn1_expend_octet_string. (CVE-2025-13151)\n","status":"published","published":"2026-01-12T18:42:22Z","modified":"2026-04-16T04:41:02.259746093Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10033-1","title":"libtasn1-6-32bit-4.21.0-1.1 on GA media","description":"These are all security issues fixed in the libtasn1-6-32bit-4.21.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-01-12T00:00:00Z","modified":"2026-03-23T04:54:21.883322Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20470-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\n- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in\n  `asn1_expend_octet_string` (bsc#1256341).\n","status":"published","published":"2026-04-07T14:33:05Z","modified":"2026-04-10T18:24:04.978601Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-13151","title":"CVE-2025-13151 in rootio-libtasn1-6 - Patched by Root","description":"Root has patched CVE-2025-13151 in the rootio-libtasn1-6 package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-01-14T09:46:54Z","modified":"2026-08-27T14:00:08.772087138Z","updated_at":"2026-11-02T15:53:32.570806Z"},{"id":"SUSE-SU-2026:0118-1","title":"Security update for libtasn1","description":"\nThis update for libtasn1 fixes the following issues:\n\n- CVE-2025-13151: stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).\n","status":"published","published":"2026-01-13T06:46:54Z","modified":"2026-02-04T04:20:14.089084Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0224-1","title":"Security update for libtasn1","description":"\nThis update for libtasn1 fixes the following issues:\n\n- CVE-2025-13151: stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).\n","status":"published","published":"2026-01-22T12:18:33Z","modified":"2026-03-23T04:52:01.867323Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20051-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\n- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in\n  `asn1_expend_octet_string` (bsc#1256341).\n","status":"published","published":"2026-01-12T12:00:27Z","modified":"2026-03-23T04:52:32.073458Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20355-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\n- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in\n  `asn1_expend_octet_string` (bsc#1256341).\n","status":"published","published":"2026-01-13T13:23:28Z","modified":"2026-03-23T04:53:18.588455Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:21001-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\n- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in\n  `asn1_expend_octet_string` (bsc#1256341).\n","status":"published","published":"2026-04-07T14:32:32Z","modified":"2026-04-14T18:26:18.333477Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:21142-1","title":"Security update for libtasn1","description":"This update for libtasn1 fixes the following issues:\n\n- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in\n  `asn1_expend_octet_string` (bsc#1256341).\n","status":"published","published":"2026-04-07T14:32:32Z","modified":"2026-04-22T18:24:28.939191Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"USN-7954-1","title":"libtasn1-6 vulnerabilities","description":"It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content.\nAn attacker could possibly use this issue to cause Libtasn1 to crash,\nresulting in a denial of service. (CVE-2025-13151)\n\nIt was discovered that Libtasn1 incorrectly handled encoding ASN.1 content.\nAn attacker could possibly use this issue to cause Libtasn1 to crash,\nresulting in a denial of service. This issue only affected Ubuntu 22.04\nLTS. (CVE-2021-46848)","status":"published","published":"2026-01-12T13:52:51Z","modified":"2026-04-22T11:04:31.475896Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}