CVE-2021-46848Critical· 9.1▾ MidnightGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.1 · likelihood 0.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.2%
2.2% → 2.8%
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
libtasn1 < 4.19.0fedora = 35fedora = 36fedora = 37debian_linux = 10.0Upgrade past the affected range:
libtasn1 4.19.0Connected by shared product, vendor, weakness, or advisory.
CVE-2021-3999High· 7.8A flaw was found in glibc
CVE-2024-5742Medium· 6.7A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file
CVE-2023-39128Medium· 5.5GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.
CVE-2023-5981Medium· 5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
CVE-2023-5156High· 7.5A flaw was found in the GNU C Library
CVE-2023-4813Medium· 5.9A flaw has been identified in glibc