CVE-2024-12243

Summary

CVE-2024-12243 is a vulnerability affecting GnuTLS, an open-source library used for transport layer security. The issue stems from an inefficient algorithm in libtasn1, a dependency of GnuTLS for ASN.1 data processing. This flaw permits a remote attacker to send a maliciously crafted certificate, causing GnuTLS to consume excessive resources while decoding the data. The result is a denial-of-service condition, either by making the application unresponsive or causing it to run slowly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.