Wind River Support Network

HomeDefectsLIN10-10744

Fixed

LIN10-10744 : Security Advisory - libtasn1 - CVE-2021-46848

Created: Oct 24, 2022 Updated: Nov 22, 2022

Resolved Date: Nov 21, 2022

Found In Version: 10.17.41.1

Fix Version: 10.17.41.27

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.



CREATE(Triage):(User=admin) CVE-2021-46848 (https://nvd.nist.gov/vuln/detail/CVE-2021-46848)

CVEs

CVE-2021-46848