ALT-PU-2017-3589-1
Closed vulnerabilities
Published: 2016-06-13
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-4574
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=6be61daac047d8e6aa941eb103f8e71a1d4e3c75
- http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=6be61daac047d8e6aa941eb103f8e71a1d4e3c75
- openSUSE-SU-2016:1370
- openSUSE-SU-2016:1370
- openSUSE-SU-2016:1525
- openSUSE-SU-2016:1525
- [oss-security] 20160510 Re: Re: CVE request: three issues in libksba
- [oss-security] 20160510 Re: Re: CVE request: three issues in libksba
- [oss-security] 20160510 Re: CVE request: three issues in libksba
- [oss-security] 20160510 Re: CVE request: three issues in libksba
- USN-2982-1
- USN-2982-1
Published: 2016-06-13
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-4579
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=a7eed17a0b2a1c09ef986f3b4b323cd31cea2b64
- http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=a7eed17a0b2a1c09ef986f3b4b323cd31cea2b64
- openSUSE-SU-2016:1525
- openSUSE-SU-2016:1525
- [oss-security] 20160510 CVE request: libksba out-of-bouds read remote DOS issue fixed in 1.3.4
- [oss-security] 20160510 CVE request: libksba out-of-bouds read remote DOS issue fixed in 1.3.4
- [oss-security] 20160511 Re: CVE request: libksba out-of-bouds read remote DOS issue fixed in 1.3.4
- [oss-security] 20160511 Re: CVE request: libksba out-of-bouds read remote DOS issue fixed in 1.3.4
- USN-2982-1
- USN-2982-1
- GLSA-201706-22
- GLSA-201706-22