Threats affecting pkg:github/gnutls/gnutls

CVE-2024-12243 is a vulnerability in GnuTLS caused by an inefficient algorithm in the libtasn1 library used for ASN.1 data processing. This inefficiency can cause excessive processing time when decoding certain DER-encoded certificate data. A remote attacker can exploit this by sending a specially crafted certificate, leading to GnuTLS becoming unresponsive or slow, resulting in a denial-of-service (DoS) condition. The vulnerability has a medium severity with a CVSS score of 5.3. Red Hat has released patches addressing this issue in their advisory RHSA-2025:17361.