CVE-2016-4579
Summary
| CVE | CVE-2016-4579 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-06-13 19:59:00 UTC |
| Updated | 2023-11-07 02:32:00 UTC |
| Description | Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl." |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| USN-2982-1: Libksba vulnerabilities | Ubuntu |
|
www.ubuntu.com |
|
| oss-security - Re: CVE request: libksba out-of-bouds read remote DOS issue fixed in 1.3.4 |
|
www.openwall.com |
|
| libksba: Denial of Service and information disclosure (GLSA 201706-22) — Gentoo security |
|
security.gentoo.org |
|
| openSUSE-SU-2016:1525-1: moderate: Security update for libksba |
|
lists.opensuse.org |
|
| oss-security - CVE request: libksba out-of-bouds read remote DOS issue fixed in
1.3.4 |
|
www.openwall.com |
|
| git.gnupg.org Git - libksba.git/commit |
CONFIRM |
git.gnupg.org |
|
| git.gnupg.org Git - libksba.git/commit |
|
git.gnupg.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710374 Gentoo Linux libksba Denial of Service (DoS) and information disclosure Vulnerability (GLSA 201706-22)