Critical Denial of Service Vulnerability in libtasn1 Package
Summary
ALSA-2026:28253: Low: libtasn1 security update. Affects libtasn1 versions < 4.16.0-10.el9_8. Fixed in 4.16.0-10.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libtasn1 is a library that provides functions for parsing Abstract Syntax Notation One (ASN.1) and managing structures, as well as encoding and decoding using Distinguished Encoding Rules (DER). It is widely used in various applications that require data serialization and communication protocols. The library's functionality is essential for ensuring proper data handling in secure communications, making it a critical component in many software systems.
Vulnerability Detail
The vulnerability identified as CVE-2025-13151 is a Denial of Service (DoS) issue caused by a stack-based buffer overflow in the function asn1_expend_octet_string within the libtasn1 library. This flaw allows an attacker to exploit the library by sending specially crafted input, which can lead to application crashes or unresponsive states. The vulnerability arises from improper handling of input data, which can overflow the buffer allocated on the stack, potentially allowing an attacker to disrupt service and affect the availability of applications relying on libtasn1.
How To Fix
Minimum fixed version
4.16.0-10.el9_8
This is the first release that contains the fix.
sudo dnf update libtasn1Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider restricting access to the application using libtasn1 or implementing input validation to filter out potentially harmful data until the package can be updated. However, this is not a substitute for applying the official patch.
Conclusion
The libtasn1 library has a critical vulnerability (CVE-2025-13151) that can lead to Denial of Service attacks due to a stack-based buffer overflow. It is crucial to update to the patched version to ensure the security and availability of applications relying on this library. Implementing workarounds can provide temporary relief, but updating is the best long-term solution.
See every vulnerability recorded for libtasn1 →
FAQ
CVE-2025-13151 is a Denial of Service vulnerability in the libtasn1 library that can be exploited through a stack-based buffer overflow.
Exploitation of this vulnerability can lead to application crashes or unresponsiveness, affecting the availability of services that depend on libtasn1.
Yes, a patch is available in version 4.16.0-10.el9_8 of the libtasn1 package. It is recommended to update to this version or later.
If immediate updating is not possible, consider implementing input validation or restricting access to the application as a temporary workaround.
You can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just a manifest file like package-lock.json. You can also check your application for vulnerabilities using the Vulert playground without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for libtasn1.
