FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libksba -- local denial of service vulnerabilities

Affected packages
		libksba	<	1.3.3

Details

VuXML ID	a1134048-10c6-11e6-94fa-002590263bf5
Discovery	2015-04-08
Entry	2016-05-03

Martin Prpic, Red Hat Product Security Team, reports:

Denial of Service due to stack overflow in src/ber-decoder.c.

Integer overflow in the BER decoder src/ber-decoder.c.

Integer overflow in the DN decoder src/dn.c.

[source]

References

CVE Name	CVE-2016-4353
CVE Name	CVE-2016-4354
CVE Name	CVE-2016-4355
CVE Name	CVE-2016-4356
Message	http://www.openwall.com/lists/oss-security/2016/04/29/5
URL	http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=07116a314f4dcd4d96990bbd74db95a03a9f650a
URL	http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=243d12fdec66a4360fbb3e307a046b39b5b4ffc3
URL	http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=aea7b6032865740478ca4b706850a5217f1c3887
URL	https://security.gentoo.org/glsa/201604-04

	
		OSZAR »