Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
cleanstart libtasn1 may mishandle decoded data
published 4 days ago
Summary
The libtasn1 library used by cleanstart can incorrectly process certain encoded inputs, which could cause the program to crash or allow unintended actions. This risk arises from a flaw in the asn1_decode_simple_ber routine that handles data decoding. Update libtasn1 to the latest version or apply the vendor's patch to mitigate the issue.
What to do
- Update cleanstart libtasn1 to version 4.13-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | libtasn1 |
< 4.13-r0 Fix: upgrade to 4.13-r0
|
Original advisory text
issue was discovered in the _asn1_decode_simple_ber function in decoding
Security vulnerability affects the libtasn1 package. An issue was discovered in the _asn1_decode_simple_ber function in decoding.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-KN42253 · OSV
Track software like this
Free during beta