CVE catalog

CVE-2021-46848

Libtasn1 vulnerabilities

[CVE catalog]

Severity
Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.82% · Oct 25, 2026

An out-of-bounds read flaw was found in Libtasn1 due to an ETYPE_OK off-by-one error in the asn1_encode_simple_der() function. This flaw allows a remote attacker to pass specially crafted data or invalid values to the application, triggering an off-by-one error, corrupting the memory, and possibly performing a denial of service (DoS) attack. libtasn1: Out-of-bound access in ETYPE_OK This flaw enables access to one additional memory byte, significantly constraining the potential damage an attacker could inflict. For this reason it is rated as having a Moderate impact to Red Hat Offerings. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibtasn1-6sid4.21.0-2fixed
Debianlibtasn1-6forky4.21.0-2fixed
Debianlibtasn1-6trixie4.20.0-2+deb13u1fixed
Debianlibtasn1-6bookworm4.19.0-2+deb12u1fixed
Debianlibtasn1-6bookworm-security4.19.0-2+deb12u1fixed
Ubuntulibtasn1-6noble4.19.0-2fixed
Ubuntulibtasn1-6noble4.19.0-3ubuntu0.24.04.2fixed
Ubuntulibtasn1-6-devnoble4.19.0-3ubuntu0.24.04.2fixed
Ubuntulibtasn1-binnoble4.19.0-3ubuntu0.24.04.2fixed
Ubuntulibtasn1-docnoble4.19.0-3ubuntu0.24.04.2fixed
Cpelibtasn1Not reported4.19.0fixed
CpefedoraNot reportedNot reportedunknown
Cpedebian_linuxNot reportedNot reportedunknown
Alpinelibtasn13.144.17.0-r1fixed
Alpinelibtasn13.154.18.0-r1fixed
Alpinelibtasn13.164.18.0-r1fixed
Alpinelibtasn13.174.19-r0fixed
Alpinelibtasn13.184.19-r0fixed
Alpinelibtasn13.194.19-r0fixed
Alpinelibtasn13.204.19-r0fixed
Alpinelibtasn13.214.19-r0fixed
Alpinelibtasn13.224.19-r0fixed
Alpinelibtasn13.234.19-r0fixed
Alpinelibtasn13.244.19-r0fixed
Ubuntulibtasn1-6pro4.5-2vulnerable
Ubuntulibtasn1-6pro4.7-2vulnerable
Ubuntulibtasn1-6pro4.7-3vulnerable
Ubuntulibtasn1-6pro4.7-3ubuntu0.16.04.1vulnerable
Ubuntulibtasn1-6pro4.7-3ubuntu0.16.04.2vulnerable
Ubuntulibtasn1-6pro4.7-3ubuntu0.16.04.3vulnerable
Ubuntulibtasn1-6pro4.7-3ubuntu0.16.04.3+esm2vulnerable
Ubuntulibtasn1-6pro4.7-3ubuntu0.16.04.3+esm3fixed
Ubuntulibtasn1-6pro4.14-3vulnerable
Ubuntulibtasn1-6pro4.15.0-2vulnerable
Ubuntulibtasn1-6pro4.16.0-2vulnerable
Ubuntulibtasn1-6pro4.16.0-2ubuntu0.1vulnerable
Ubuntulibtasn1-6pro4.16.0-2ubuntu0.1+esm1fixed
Ubuntulibtasn1-622.044.16.0-2vulnerable
Ubuntulibtasn1-622.044.16.0-2build1vulnerable
Ubuntulibtasn1-622.044.17.0-2vulnerable
Ubuntulibtasn1-622.044.18.0-3vulnerable
Ubuntulibtasn1-622.044.18.0-4vulnerable
Ubuntulibtasn1-622.044.18.0-4build1vulnerable
Ubuntulibtasn1-622.044.18.0-4ubuntu0.1vulnerable
Ubuntulibtasn1-622.044.18.0-4ubuntu0.2fixed
Ubuntulibtasn1-622.044.16.0-2vulnerable
Ubuntulibtasn1-622.044.16.0-2build1vulnerable
Ubuntulibtasn1-622.044.17.0-2vulnerable
Ubuntulibtasn1-622.044.18.0-3vulnerable
Ubuntulibtasn1-622.044.18.0-4vulnerable
Ubuntulibtasn1-622.044.18.0-4build1vulnerable
Ubuntulibtasn1-622.044.18.0-4ubuntu0.1vulnerable
Ubuntulibtasn1-622.044.18.0-4ubuntu0.2fixed
Ubuntulibtasn1-624.044.19.0-3vulnerable
Ubuntulibtasn1-624.044.19.0-3build1vulnerable
Ubuntulibtasn1-624.044.19.0-3ubuntu0.24.04.1vulnerable
Ubuntulibtasn1-624.044.19.0-3ubuntu0.24.04.2fixed
Ubuntulibtasn1-625.104.20.0-2vulnerable
Ubuntulibtasn1-625.104.20.0-2build1vulnerable
Ubuntulibtasn1-625.104.20.0-2ubuntu0.25.10.1fixed
Suselibtasn1openstack cloud 94.9-3.13.1fixed
Suselibtasn1openstack cloud crowbar 94.9-3.13.1fixed
Suselibtasn1linux enterprise server for sap applications 12 sp44.9-3.13.1fixed
Suselibtasn1linux enterprise software development kit 12 sp54.9-3.13.1fixed
Suselibtasn1linux enterprise server 12 sp3-bcl4.9-3.13.1fixed
Suselibtasn1linux enterprise server 12 sp4-ltss4.9-3.13.1fixed
Suselibtasn1linux enterprise server 12 sp54.9-3.13.1fixed
Suselibtasn1linux enterprise server for sap applications 12 sp54.9-3.13.1fixed
Suselibtasn1linux enterprise micro 5.34.13-150000.4.8.1fixed
Suselibtasn1linux enterprise module for basesystem 15 sp34.13-150000.4.8.1fixed
Suselibtasn1linux enterprise module for basesystem 15 sp44.13-150000.4.8.1fixed
Suselibtasn1linux enterprise high performance computing 15-espos4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise high performance computing 15-ltss4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise high performance computing 15 sp1-espos4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise high performance computing 15 sp1-ltss4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise high performance computing 15 sp2-espos4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise high performance computing 15 sp2-ltss4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server 15-ltss4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server 15 sp1-bcl4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server 15 sp1-ltss4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server 15 sp2-bcl4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server 15 sp2-ltss4.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server for sap applications 154.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server for sap applications 15 sp14.13-150000.4.8.1fixed
Suselibtasn1linux enterprise server for sap applications 15 sp24.13-150000.4.8.1fixed
Suselibtasn1manager proxy 4.14.13-150000.4.8.1fixed
Suselibtasn1manager retail branch server 4.14.13-150000.4.8.1fixed
Suselibtasn1manager server 4.14.13-150000.4.8.1fixed
Suselibtasn1linux enterprise micro 5.14.13-150000.4.8.1fixed
Suselibtasn1linux enterprise micro 5.24.13-150000.4.8.1fixed
Suselibtasn1enterprise storage 64.13-150000.4.8.1fixed
Suselibtasn1enterprise storage 74.13-150000.4.8.1fixed
Opensuselibtasn1leap micro 5.24.13-150000.4.8.1fixed
Opensuselibtasn1leap 15.34.13-150000.4.8.1fixed
Opensuselibtasn1leap 15.44.13-150000.4.8.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibtasn1-6sourcesid4.19.0-2not yet assignedNot reportedNot reported
Debianlibtasn1-6sourceforky4.19.0-2not yet assignedNot reportedNot reported
Debianlibtasn1-6sourcetrixie4.19.0-2not yet assignedNot reportedNot reported
Debianlibtasn1-6sourcebookworm4.19.0-2not yet assignedNot reportedNot reported
Ubuntulibtasn1-6debnoble4.19.0-2Not reportedNot reportedNot reported
Ubuntulibtasn1-6debnoble4.19.0-3ubuntu0.24.04.2Not reportedNot reportedNot reported
Ubuntulibtasn1-6-devdebnoble4.19.0-3ubuntu0.24.04.2Not reportedNot reportedNot reported
Ubuntulibtasn1-bindebnoble4.19.0-3ubuntu0.24.04.2Not reportedNot reportedNot reported
Ubuntulibtasn1-docdebnoble4.19.0-3ubuntu0.24.04.2Not reportedNot reportedNot reported
Cpelibtasn1cpeNot reported4.19.0Not reportedNVD-CVE-2021-46848Not reported
Alpinelibtasn1apk3.144.17.0-r1Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.154.18.0-r1Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.164.18.0-r1Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.174.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.184.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.194.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.204.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.214.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.224.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.234.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Alpinelibtasn1apk3.244.19-r0Not reportedALPINE-CVE-2021-46848Not reported
Ubuntulibtasn1-6debpro4.7-3ubuntu0.16.04.3+esm3Not reportedUSN-5707-1Not reported
Ubuntulibtasn1-6debpro4.16.0-2ubuntu0.1+esm1Not reportedUBUNTU-CVE-2021-46848Not reported
Ubuntulibtasn1-6deb22.044.18.0-4ubuntu0.2Not reportedUBUNTU-CVE-2021-46848Not reported
Ubuntulibtasn1-6deb22.044.18.0-4ubuntu0.2Not reportedUSN-7954-1Not reported
Ubuntulibtasn1-6deb24.044.19.0-3ubuntu0.24.04.2Not reportedUSN-7954-1Not reported
Ubuntulibtasn1-6deb25.104.20.0-2ubuntu0.25.10.1Not reportedUSN-7954-1Not reported
Suselibtasn1rpmopenstack cloud 94.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmopenstack cloud crowbar 94.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmlinux enterprise server for sap applications 12 sp44.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmlinux enterprise software development kit 12 sp54.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmlinux enterprise server 12 sp3-bcl4.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmlinux enterprise server 12 sp4-ltss4.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmlinux enterprise server 12 sp54.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmlinux enterprise server for sap applications 12 sp54.9-3.13.1Not reportedSUSE-SU-2022:3817-1Not reported
Suselibtasn1rpmlinux enterprise micro 5.34.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise module for basesystem 15 sp34.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise module for basesystem 15 sp44.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise high performance computing 15-espos4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise high performance computing 15-ltss4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise high performance computing 15 sp1-espos4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise high performance computing 15 sp1-ltss4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise high performance computing 15 sp2-espos4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise high performance computing 15 sp2-ltss4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server 15-ltss4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server 15 sp1-bcl4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server 15 sp1-ltss4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server 15 sp2-bcl4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server 15 sp2-ltss4.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server for sap applications 154.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server for sap applications 15 sp14.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise server for sap applications 15 sp24.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmmanager proxy 4.14.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmmanager retail branch server 4.14.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmmanager server 4.14.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise micro 5.14.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmlinux enterprise micro 5.24.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmenterprise storage 64.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Suselibtasn1rpmenterprise storage 74.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Opensuselibtasn1rpmleap micro 5.24.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Opensuselibtasn1rpmleap 15.34.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported
Opensuselibtasn1rpmleap 15.44.13-150000.4.8.1Not reportedSUSE-SU-2022:3784-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libtasn1-6]Fixed
    Details (4)
    • 4.19.0-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

  • Source package: [libtasn1-6]

    Details (4)
    • 4.19.0-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

  • Source package: [libtasn1-6]

    Details (4)
    • 4.19.0-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

  • Source package: [libtasn1-6]

    Details (4)
    • 4.19.0-2+deb12u1 · all · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · all · bookworm

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

    • 4.19.0-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 4.19.0-2

      usn · libtasn1-6 · debian · bookworm

Observed:

References