The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.
References
Configurations
History
07 Nov 2023, 02:32
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
18 May 2023, 18:08
Type | Values Removed | Values Added |
---|---|---|
First Time |
Gnupg libksba
Gnupg |
|
CPE | cpe:2.3:a:gnupg:libksba:*:*:*:*:*:*:*:* |
Information
Published : 2016-06-13 19:59
Updated : 2023-12-10 11:46
NVD link : CVE-2016-4356
Mitre link : CVE-2016-4356
CVE.ORG link : CVE-2016-4356
JSON object : View
Products Affected
canonical
- ubuntu_linux
gnupg
- libksba
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer