PT-2016-7973 · Gnu · Libksba

Published 2016-09-21 · Updated 2016-09-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libksba version 1.3.4

Description The issue is related to the allocation of an unproportionate amount of memory when parsing crafted certificates in libksba, which may lead to a denial of service (DoS). Additionally, in libksba 1.3.4, the allocated memory is uninitialized and could potentially contain sensitive data left in a freed memory block.

Recommendations For libksba version 1.3.4, consider updating to a newer version that addresses the memory allocation issue to prevent potential DoS and sensitive data exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2016-0310

Affected Products

Libksba

References · 6

• https://advisories.mageia.org/MGASA-2016-0310.html · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0310 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/KUORSGVTYHQQKX2AYN7ASGUMPKFCV3HJ · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=19288 · Note
• http://openwall.com/lists/oss-security/2016/08/20/3 · Note
• http://openwall.com/lists/oss-security/2016/08/22/7 · Note