An update of the libtasn1 package has been released.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_28253 advisory.

    * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string     (CVE-2025-13151)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large     number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even     crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial     of service attack.(CVE-2024-12133)

    Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input     data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libtasn1 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtasn1 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input     data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Tenable has extracted the preceding description block directly from the EulerOS libtasn1 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20470-1 advisory.

    - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in       `asn1_expend_octet_string` (bsc#1256341).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28235 advisory.

    A library that provides Abstract Syntax Notation One (ASN.1, as specified by the X.680 ITU-T     recommendation) parsing and structures management, and Distinguished Encoding Rules (DER, as per X.690)     encoding and decoding functions.

    Security Fix(es):

    * libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string     (CVE-2025-13151)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libtasn1 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input     data resulting in a buffer overflow in asn1_expend_octet_string.(CVE-2025-13151)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libtasn1 security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7954-1 advisory.

    It was discovered that Libtasn1 incorrectly handled decoding ASN.1 content. An attacker could possibly use     this issue to cause Libtasn1 to crash, resulting in a denial of service. (CVE-2025-13151)

    It was discovered that Libtasn1 incorrectly handled encoding ASN.1 content. An attacker could possibly use     this issue to cause Libtasn1 to crash, resulting in a denial of service. This issue only affected Ubuntu     22.04 LTS. (CVE-2021-46848)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
297247	Photon OS 4.0: Libtasn1 PHSA-2026-4.0-0946	Nessus	PhotonOS Local Security Checks	2026/1/30	2026/11/2	high
359027	Rocky Linux 9 [CIQ] Security Update: libtasn1 / libtasn1-debuginfo / libtasn1-debugsource / etc (crlsa-2026_28253)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
347244	EulerOS Virtualization 2.11.0 : libtasn1 (EulerOS-SA-2026-3522)	Nessus	Huawei Local Security Checks	2026/9/18	2026/9/18	high
302423	EulerOS 2.0 SP12 : libtasn1 (EulerOS-SA-2026-1372)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	high
305860	openSUSE 16 Security Update : libtasn1 (openSUSE-SU-2026:20470-1)	Nessus	SuSE Local Security Checks	2026/4/10	2026/4/10	high
322322	RHEL 10 : libtasn1 (RHSA-2026:28235)	Nessus	Red Hat Local Security Checks	2026/6/24	2026/6/24	high
332388	Photon OS 5.0: Libtasn1 PHSA-2026-5.0-92-0737	Nessus	PhotonOS Local Security Checks	2026/8/5	2026/11/2	high
377404	EulerOS Virtualization 2.15.0 : libtasn1 (EulerOS-SA-2026-4605)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	high
284657	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : Libtasn1 vulnerabilities (USN-7954-1)	Nessus	Ubuntu Local Security Checks	2026/1/14	2026/1/16	critical

检测

插件搜索

high

high

high

high

high

high

high

high

critical