CVE-2024-12133: Red Hat Discovery 1.14
Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
Affected products
- Red Hat Red Hat Discovery 1.14: before 1.14.3-1748529279 (fixed in 1.14.3-1748529279); before 1.14.2-1748467619 (fixed in 1.14.2-1748467619)
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat Enterprise Linux 8: before 0:4.13-5.el8_10 (fixed in 0:4.13-5.el8_10)
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: before 0:3.6.14-10.el8_4.1 (fixed in 0:3.6.14-10.el8_4.1); before 0:4.13-3.el8_4.1 (fixed in 0:4.13-3.el8_4.1)
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: before 0:3.6.14-10.el8_4.1 (fixed in 0:3.6.14-10.el8_4.1); before 0:4.13-3.el8_4.1 (fixed in 0:4.13-3.el8_4.1)
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: before 0:3.6.16-5.el8_6.5 (fixed in 0:3.6.16-5.el8_6.5); before 0:4.13-3.el8_6.2 (fixed in 0:4.13-3.el8_6.2)
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: before 0:3.6.16-5.el8_6.5 (fixed in 0:3.6.16-5.el8_6.5); before 0:4.13-3.el8_6.2 (fixed in 0:4.13-3.el8_6.2)
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: before 0:3.6.16-7.el8_8.4 (fixed in 0:3.6.16-7.el8_8.4); before 0:4.13-4.el8_8.1 (fixed in 0:4.13-4.el8_8.1)
- Red Hat Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions: before 0:3.6.16-7.el8_8.4 (fixed in 0:3.6.16-7.el8_8.4); before 0:4.13-4.el8_8.1 (fixed in 0:4.13-4.el8_8.1)
- Red Hat Red Hat Enterprise Linux 9: before 0:4.16.0-9.el9 (fixed in 0:4.16.0-9.el9)
- Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:4.16.0-8.el9_2.1 (fixed in 0:4.16.0-8.el9_2.1)
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: before 0:4.16.0-8.el9_4.1 (fixed in 0:4.16.0-8.el9_4.1)
- Red Hat Red Hat Openshift Container Platform 4
- Siemens Ruggedcom Rox MX5000: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox MX5000RE: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1400: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1500: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1501: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1510: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1511: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1512: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1524: before V2.17.0 (fixed in V2.17.0)
- Siemens Ruggedcom Rox RX1536: before V2.17.0 (fixed in V2.17.0)
- and 4 more
Published 2025-02-10. Last modified 2026-06-30.