---
id: CVE-2024-12243
title: >-
  Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to
  remote dos
summary: >-
  A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data
  processing. Due to an inefficient algorithm in libtasn1, decoding certain
  DER-encoded certificate data can take excessive time, leading to increased
  resource consumption…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-407
vendor: Red Hat
product: gnutls
affected:
  - gnutls <= 3.6.16
  - gnutls >= 3.7.0 <= 3.7.11
  - gnutls >= 3.8.0 < 3.8.8
  - gnutls (all versions)
  - gnutls (all versions)
  - gnutls (all versions)
  - gnutls (all versions)
  - gnutls (all versions)
  - gnutls (all versions)
  - discovery/discovery-server-rhel9 (all versions)
  - discovery/discovery-ui-rhel9 (all versions)
  - gnutls (all versions)
  - gnutls
  - gnutls
  - rhcos (all versions)
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2025-02-10T16:25:20.087658Z'
published: '2025-02-10'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T00:37:59.907Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-12243'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2025:17361'
    label: 'RHSA-2025:17361'
  - url: 'https://access.redhat.com/errata/RHSA-2025:4051'
    label: 'RHSA-2025:4051'
  - url: 'https://access.redhat.com/errata/RHSA-2025:7076'
    label: 'RHSA-2025:7076'
  - url: 'https://access.redhat.com/errata/RHSA-2025:8020'
    label: 'RHSA-2025:8020'
  - url: 'https://access.redhat.com/errata/RHSA-2025:8385'
    label: 'RHSA-2025:8385'
  - url: 'https://access.redhat.com/security/cve/CVE-2024-12243'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2344615'
    label: RHBZ#2344615
  - url: 'https://gitlab.com/gnutls/gnutls/-/issues/1553'
  - url: 'https://gitlab.com/gnutls/libtasn1/-/issues/52'
tags:
  - cve.org
epss: 0.01292
epssPercentile: 0.69696
ingestedAt: '2026-10-15T04:46:37.302Z'
---

## Overview

A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.

## Affected

- `gnutls <= 3.6.16`
- `gnutls >= 3.7.0 <= 3.7.11`
- `gnutls >= 3.8.0 < 3.8.8`
- `gnutls (all versions)`
- `gnutls (all versions)`
- `gnutls (all versions)`
- `gnutls (all versions)`
- `gnutls (all versions)`
- `gnutls (all versions)`
- `discovery/discovery-server-rhel9 (all versions)`
- `discovery/discovery-ui-rhel9 (all versions)`
- `gnutls (all versions)`
- `gnutls`
- `gnutls`
- `rhcos (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.