A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.
An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libtasn1-6 | Ubuntu | focal | * |
| Libtasn1-6 | Ubuntu | jammy | * |
| Libtasn1-6 | Ubuntu | noble | * |
| Libtasn1-6 | Ubuntu | oracular | * |
| Libtasn1-6 | Ubuntu | upstream | * |