CVE-2024-12243
ADVISORY - nistSummary
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
EPSS Score: 0.00623 (0.691)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Inefficient Algorithmic Complexity
ADVISORY - redhat
Inefficient Algorithmic Complexity
Sign in to Docker Scout
See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.
Sign in