Wind River Support Network

HomeDefectsLIN1021-4639

Fixed

LIN1021-4639 : Security Advisory - libtasn1 - CVE-2021-46848

Created: Oct 24, 2022 Updated: Nov 5, 2022

Resolved Date: Nov 5, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.15

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.



CREATE(Triage):(User=admin) CVE-2021-46848 (https://nvd.nist.gov/vuln/detail/CVE-2021-46848)

CVEs

CVE-2021-46848