PT-2022-5380

🗓️ 24 Aug 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

GNU Libtasn1 before 4.19.0 has an off by one error in asn1 encode simple der that enables data disclosure or denial of service.

Reporter	Title	Published	Views	Family All 437
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Mar 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to GNU Libtasn1 information disclosure vulnerability [CVE-2021-46848]	11 Jul 202313:36	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from libxml2, expat, libtasn1 and systemd	25 Jan 202316:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities have been identified in OpenSSL, Apache HTTP Server and other system libraries shipped with the DS8000 Hardware Management Console (HMC)	12 Jul 202311:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202502:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Verify Access	11 May 202316:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities	28 Apr 202313:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private	20 Jul 201818:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	1 Nov 202218:28	–	ibm

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-46848
access	www.access.redhat.com/errata/RHSA-2023:0343
osv	www.osv.dev/vulnerability/OESA-2024-1699
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
t	www.t.me/cvenotify/41638
suse	www.suse.com/support/update/announcement/2022/suse-su-20223817-1
altsp	www.altsp.su/obnovleniya-bezopasnosti
t	www.t.me/cvenotify/40101
ubuntu	www.ubuntu.com/security/notices/USN-7954-1
lists	www.lists.suse.com/pipermail/sle-security-updates/2022-October/012715.html

10 Feb 2026 00:00Current

8High risk

Vulners AI Score8

CVSS 3.19.1

CVSS 27.1

CVSS 35.5

EPSS0.01587

SSVC