This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-46848 →

DEBIAN-CVE-2021-46848

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 libtasn1-6

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2"}]}]

Debian:13 libtasn1-6

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2"}]}]

Debian:14 libtasn1-6

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.0-2"}]}]