PT-2016-7973 · Gnu · Libksba

Publicado 2016-09-21 · Atualizado 2016-09-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libksba version 1.3.4

Description The issue is related to the allocation of an unproportionate amount of memory when parsing crafted certificates in libksba, which may lead to a denial of service (DoS). Additionally, in libksba 1.3.4, the allocated memory is uninitialized and could potentially contain sensitive data left in a freed memory block.

Recommendations For libksba version 1.3.4, consider updating to a newer version that addresses the memory allocation issue to prevent potential DoS and sensitive data exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2016-0310

Produtos afetados

Libksba

Referências · 6

• https://bugs.mageia.org/show_bug.cgi?id=19288 · Nota
• http://openwall.com/lists/oss-security/2016/08/20/3 · Nota
• https://advisories.mageia.org/MGASA-2016-0310.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2016-0310 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2016/08/22/7 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/KUORSGVTYHQQKX2AYN7ASGUMPKFCV3HJ · Aviso do Fabricante