CVE-2024-21452

Summary

CVE-2024-21452 is a newly identified transient Denial of Service (DoS) vulnerability affecting systems that decode ASN.1 Open Systems Interconnection (OSI) Encoding Rules (PER or BER) messages with unknown extensions. An attacker can exploit this vulnerability by sending a specially crafted ASN.1 OER message containing a SEQUENCE of unknown extensions, which may cause the decoding process to crash or consume excessive resources, leading to a DoS condition. Organizations are advised to update their software and implement appropriate security controls to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.