Known vulnerabilities in libtasn1 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
libtasn1 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:libtasn1_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
15
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128578 - Out-of-bounds write CVE-2026-42015 |
CWE-787 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 18 more |
||
| #VU128577 - Out-of-bounds read CVE-2026-5260 |
CWE-125 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 17 more |
||
| #VU128576 - Use After Free CVE-2026-42014 |
CWE-416 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 18 more |
||
| #VU128575 - Improper Certificate Validation CVE-2026-42013 |
CWE-295 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 18 more |
||
| #VU128574 - Improper Certificate Validation CVE-2026-42012 |
CWE-295 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026052063 SB2026052087 and 15 more |
||
| #VU128573 - Improper Certificate Validation CVE-2026-42011 |
CWE-295 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026052063 SB2026052087 and 12 more |
||
| #VU128572 - Improper Certificate Validation CVE-2026-3833 |
CWE-295 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 17 more |
||
| #VU128571 - Improper Authentication CVE-2026-42010 |
CWE-287 | High | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 18 more |
||
| #VU128570 - Heap-based Buffer Overflow CVE-2026-33845 |
CWE-122 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB20260509148 SB2026052063 and 13 more |
||
| #VU128569 - Always-Incorrect Control Flow Implementation CVE-2026-42009 |
CWE-670 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 21 more |
||
| #VU128568 - Heap-based Buffer Overflow CVE-2026-33846 |
CWE-122 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 18 more |
||
| #VU122491 - Resource exhaustion CVE-2025-14831 |
CWE-400 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2 | 10.02.2026 |
SB2026021004 SB2026021048 SB2026021061 and 20 more |
||
| #VU121181 - Stack-based buffer overflow CVE-2025-13151 |
CWE-121 | Medium | 4.13-6.el8_10 | 12.01.2026 |
SB2026011266 SB2026011267 SB2026011354 and 18 more |
||
| #VU103980 - Resource exhaustion CVE-2024-12133 |
CWE-400 | Medium | 4.13-3.el8_4.1, 4.13-3.el8_6.2, 4.16.0-8.el9_2.1 | 14.02.2025 |
SB2025021428 SB2025021429 SB2025021430 and 78 more |
||
| #VU68858 - Off-by-one Error CVE-2021-46848 |
CWE-193 | Medium | 4.13-4.el8_7, 4.16.0-8.el9_1 | 31.10.2022 |
SB2022103141 SB2022103142 SB2022103143 and 84 more |