CVE-2024-12243: Red Hat Discovery 1.14

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.

Affected products

  • Red Hat Red Hat Discovery 1.14
  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 8: before 0:3.6.16-8.el8_10.3 (fixed in 0:3.6.16-8.el8_10.3)
  • Red Hat Red Hat Enterprise Linux 9: before 0:3.8.3-6.el9 (fixed in 0:3.8.3-6.el9)
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:3.7.6-21.el9_2.4 (fixed in 0:3.7.6-21.el9_2.4)
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: before 0:3.8.3-4.el9_4.2 (fixed in 0:3.8.3-4.el9_4.2)
  • Red Hat Red Hat Openshift Container Platform 4
  • Siemens Ruggedcom Rox MX5000: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox MX5000RE: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1400: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1500: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1501: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1510: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1511: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1512: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1524: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX1536: before V2.17.0 (fixed in V2.17.0)
  • Siemens Ruggedcom Rox RX5000: before V2.17.0 (fixed in V2.17.0)
  • Siemens SIMATIC s7-1500 CPU 1518-4 Pn/dp Mfp: from V3.1.5
  • Siemens SIMATIC s7-1500 CPU 1518f-4 Pn/dp Mfp: from V3.1.5
  • Siemens Siplus s7-1500 CPU 1518-4 Pn/dp Mfp: from V3.1.5

Published 2025-02-10. Last modified 2026-06-17.