ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.
References
Configurations
History
07 Nov 2023, 02:32
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
18 May 2023, 18:08
Type | Values Removed | Values Added |
---|---|---|
First Time |
Gnupg libksba
Gnupg |
|
CPE | cpe:2.3:a:gnupg:libksba:*:*:*:*:*:*:*:* |
Information
Published : 2016-06-13 19:59
Updated : 2023-12-10 11:46
NVD link : CVE-2016-4354
Mitre link : CVE-2016-4354
CVE.ORG link : CVE-2016-4354
JSON object : View
Products Affected
gnupg
- libksba
canonical
- ubuntu_linux
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer