gnupg libksba vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

Gnupg Libksba Gpg4win Gpg4win Gnupg Vs-desktop Gnupg Gnupg

9.8

CVSSv3

Libksba prior to 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Gnupg Libksba Debian Debian Linux 10.0 Debian Debian Linux 11.0

7.5

CVSSv3

ber-decoder.c in Libksba prior to 1.3.3 does not properly handle decoder stack overflows, which allows remote malicious users to cause a denial of service (abort) via crafted BER data.

Gnupg Libksba Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04

7.5

CVSSv3

ber-decoder.c in Libksba prior to 1.3.3 uses an incorrect integer data type, which allows remote malicious users to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Gnupg Libksba

7.5

CVSSv3

Multiple integer overflows in ber-decoder.c in Libksba prior to 1.3.3 allow remote malicious users to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

Gnupg Libksba Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04

7.5

CVSSv3

The append_utf8_value function in the DN decoder (dn.c) in Libksba prior to 1.3.3 allows remote malicious users to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

Gnupg Libksba Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04

7.5

CVSSv3

Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba prior to 1.3.4 allows remote malicious users to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for C...

Gnupg Libksba Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04 Opensuse Leap 42.1 Opensuse Opensuse 13.2

7.5

CVSSv3

Libksba prior to 1.3.4 allows remote malicious users to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."

Gnupg Libksba Opensuse Leap 42.1 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04

NA

Integer underflow in the ksba_oid_to_str function in Libksba prior to 1.3.2, as used in GnuPG, allows remote malicious users to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

Mageia Mageia 3.0 Mageia Mageia 4.0 Debian Debian Linux 8.0 Debian Debian Linux 7.0 Gnupg Libksba Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Gnupg Gnupg 2.1.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook