Denial of Service Vulnerability in libtasn1: Security Update Required
Summary
RLSA-2026:28253: Low: libtasn1 security update. Affects libtasn1 versions < 0:4.16.0-10.el9_8. Fixed in 0:4.16.0-10.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libtasn1 is a library that facilitates the parsing and management of Abstract Syntax Notation One (ASN.1) structures, as well as encoding and decoding functions based on Distinguished Encoding Rules (DER). It is widely used in various applications that require ASN.1 data handling. The library's functionality is critical for ensuring proper data communication and processing in systems that rely on ASN.1 standards.
Vulnerability Detail
The vulnerability identified as CVE-2025-13151 in libtasn1 is a Denial of Service (DoS) issue caused by a stack-based buffer overflow in the function asn1_expend_octet_string. This flaw can be exploited by an attacker to crash the application or service using the library, leading to service interruptions. The vulnerability arises from improper handling of input data, which can overflow the stack and disrupt normal operations.
How To Fix
Minimum fixed version
0:4.16.0-10.el9_8
This is the first release that contains the fix.
sudo dnf update libtasn1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can limit the input size to the asn1_expend_octet_string function to prevent buffer overflow. However, this is not a permanent solution and updating the package is strongly recommended.
Conclusion
The libtasn1 library has a critical vulnerability (CVE-2025-13151) that can lead to Denial of Service attacks. It is crucial to update to the patched version to mitigate risks. Monitoring tools like Vulert can help keep your software secure by alerting you to potential vulnerabilities.
See every vulnerability recorded for libtasn1 →
FAQ
CVE-2025-13151 is a vulnerability in the libtasn1 library that allows for a Denial of Service attack due to a stack-based buffer overflow.
Exploitation of this vulnerability can lead to application crashes and service interruptions, affecting the availability of your software.
Yes, a patch is available in the form of an updated libtasn1 package version 0:4.16.0-10.el9_8.
If immediate updates are not possible, consider implementing input size restrictions as a temporary workaround until you can apply the patch.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file like package-lock.json. You can also check for vulnerabilities in your application using the Vulert playground without signup.
Related vulnerabilities
Recent vulnerabilities recorded for libtasn1.
