CVE-2021-46848CWE-193

CVE-2021-46848

Critical · published October 24, 2022

CVSS v3.1
9.1
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

🔥 An off-by-one error in GNU Libtasn1 could lead to catastrophic exploits! Just imagine a tiny mistake creating massive potential chaos! Think of this off-by-one error as a miscalculation in building a bridge. If the architect underestimates the required materials by just one beam, the entire structure could become unstable and lead to disaster—just like this vulnerability affects data encoding processes in a critical library. An attacker could exploit this issue to cause buffer overflows, potentially leading to remote code execution, data corruption, or even crashes in applications relying on GNU Libtasn1. With consequences this severe, the ramifications could be absolutely devastating!

Put simply

Think of this off-by-one error as a miscalculation in building a bridge. If the architect underestimates the required materials by just one beam, the entire structure could become unstable and lead to disaster—just like this vulnerability affects data encoding processes in a critical library. This vulnerability lies in the ETYPE_OK condition within the asn1_encode_simple_der function, where an incorrect array size check could allow for an overflow that malicious actors could exploit.

What to do

An attacker could exploit this issue to cause buffer overflows, potentially leading to remote code execution, data corruption, or even crashes in applications relying on GNU Libtasn1. With consequences this severe, the ramifications could be absolutely devastating! Upgrade GNU Libtasn1 to version 4.19.0 or later immediately. Additionally, conduct thorough testing of applications that utilize this library to ensure that they no longer employ the vulnerable version and monitor your systems for any unusual activity. You've got this! By staying proactive and patching up vulnerabilities like this one, you're helping to keep the internet a safer place! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02823 · 86.5th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2022-10-24T18:15Z
Affected products (5)
ProductVersionsFixed in
gnu/libtasn1< 4.19.04.19.0
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
debian/debian_linuxall versions—
References (19)
https://bugs.gentoo.org/866237 · [email protected]https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5 · [email protected]https://gitlab.com/gnutls/libtasn1/-/issues/32 · [email protected]https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/ · [email protected]https://security.netapp.com/advisory/ntap-20221118-0006/ · [email protected]https://bugs.gentoo.org/866237 · af854a3a-2127-422b-91ae-364da2661108https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5 · af854a3a-2127-422b-91ae-364da2661108https://gitlab.com/gnutls/libtasn1/-/issues/32 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2023/01/msg00003.html · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV4SHDJF2XLB4CUPTBPQQ6CLGZ5LKXPZ/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECM2ELTVRYV4BZ5L5GMIRQE27RFHPAQ6/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGO7XST4EIJGX4B2ITZCYSWM24534BSU/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5LWOGF7QRMNFRUCZY6TDYQJVFI6MOQ2/ · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20221118-0006/ · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 24 OCT 00:00Z
    GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der
    cvelistv5