CVE-2016-4355
HighSummary
Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.
Risk Assessment
Attackers can exploit this vulnerability to remotely trigger a system crash, potentially leading to service availability interruptions.
Recommendation
It is recommended to update Libksba to version 1.3.3 or later to mitigate this vulnerability.
Other vulnerabilities in Libksba
See all- CVE-2016-4579High
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the 'returned length of the object from _ksba_ber_parse_tl.'
- CVE-2016-4574High
Off-by-one error in the append_utf8_value function in the DN decoder in Libksba before version 1.3.4 allows remote attackers to cause a denial of service via invalid utf-8 encoded data.
- CVE-2016-4356High
The append_utf8_value function in the DN decoder in Libksba before version 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.
- CVE-2016-4354High
The ber-decoder.c file in Libksba before version 1.3.3 uses an incorrect integer data type, allowing remote attackers to cause a denial of service (crash) via crafted BER data, leading to a buffer overflow.
- CVE-2016-4353High
The ber-decoder.c file in Libksba before version 1.3.3 has a flaw in handling decoder stack overflows, allowing remote attackers to cause a denial of service (abort) via crafted BER data.
- CVE-2014-9087High
An integer underflow in the ksba_oid_to_str function in Libksba before version 1.3.2 allows remote attackers to cause a denial of service (crash) via a crafted OID in an S/MIME message or ECC based OpenPGP data.
Original NVD description (English source)
Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.