CVE:CVE-2021-46848
CNNVD:CNNVD-202210-1689
Libtasn1是美国GNU社区的一个 GnuTLS、p11-kit 和其他一些软件包使用的 ASN.1 库。
GNU Libtasn1 4.19.0之前的版本存在缓冲区错误漏洞，该漏洞源于其ETYPE_OK数组大小检查影响asn1_encode_simple_der。
solution:Upgrade gnu libtasn1 to a higher version than 4.19.0,and avoid the version (,4.19.0); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0