Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-4574
Description:Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
Test IDs: 1.3.6.1.4.1.25623.1.1.4.2017.2699.1   1.3.6.1.4.1.25623.1.1.4.2017.2700.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-4574
http://www.openwall.com/lists/oss-security/2016/05/10/4
http://www.openwall.com/lists/oss-security/2016/05/10/3
SuSE Security Announcement: openSUSE-SU-2016:1370 (Google Search)
http://lists.opensuse.org/opensuse-updates/2016-05/msg00087.html
SuSE Security Announcement: openSUSE-SU-2016:1525 (Google Search)
http://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html
http://www.ubuntu.com/usn/USN-2982-1




© 1998-2025 E-Soft Inc. All rights reserved.