OESA-2022-2030

    Dashboard / Vulnerabilities / OESA-2022-2030

    OESA-2022-2030

    Published: 28 Oct 2022Last Modified: 18 Aug 2026
    Upstream:
    CVE-2021-46848

    Summary: libtasn1 security update

    Details: Libtasn1 is the ASN.1 library used by GnuTLS, p11-kit and some other packages.The goal of this implementation is to be highly portable, and only require an ANSI C99 platform.This library provides Abstract Syntax Notation One (ASN.1,as specified by the X.680 ITU-T recommendation) parsing and structures management,and Distinguished Encoding Rules (DER, as per X.690) encoding and decoding functions. Security Fix(es): GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.(CVE-2021-46848)

    References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2030, https://nvd.nist.gov/vuln/detail/CVE-2021-46848

    Affected packages

    Package

    Name: libtasn1

    Purl: pkg:rpm/openEuler/libtasn1&distro=openEuler-20.03-LTS-SP1

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.16.0-2.oe1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High