Threats affecting pkg:github/gnutls/libtasn1

CVE-2024-12133 is a vulnerability in libtasn1 involving inefficient handling of certain certificate data. This inefficiency causes the library to take significantly longer to process certificates with many elements, potentially leading to system slowdown or crash. An attacker can exploit this by sending a specially crafted certificate to trigger a denial of service (DoS). The issue has a moderate severity rating with a CVSS score of 5.3. Red Hat has released patches addressing this vulnerability in libtasn1 for Red Hat Enterprise Linux 9.2 and related variants.