CVE

Id
91393  
CVE No.
CVE-2016-4574  
Status
Candidate  
Description
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.  
Phase
Assigned (20160510)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
785145 91393 CVE-2016-4574 MLIST:[oss-security] 20160510 Re: CVE request: three issues in libksba  View
785146 91393 CVE-2016-4574 URL:http://www.openwall.com/lists/oss-security/2016/05/10/4  View
785147 91393 CVE-2016-4574 MLIST:[oss-security] 20160510 Re: Re: CVE request: three issues in libksba  View
785148 91393 CVE-2016-4574 URL:http://www.openwall.com/lists/oss-security/2016/05/10/3  View
785149 91393 CVE-2016-4574 CONFIRM:http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=6be61daac047d8e6aa941eb103f8e71a1d4e3c75  View
785150 91393 CVE-2016-4574 SUSE:openSUSE-SU-2016:1370  View
785151 91393 CVE-2016-4574 URL:http://lists.opensuse.org/opensuse-updates/2016-05/msg00087.html  View
785152 91393 CVE-2016-4574 SUSE:openSUSE-SU-2016:1525  View
785153 91393 CVE-2016-4574 URL:http://lists.opensuse.org/opensuse-updates/2016-06/msg00028.html  View
785154 91393 CVE-2016-4574 UBUNTU:USN-2982-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
176 JVNDB-2016-000183 baserCMS 用プラグイン「アップローダー」におけるクロスサイトリクエストフォージェリの脆弱性 baserCMSユーザー会が提供する baserCMS は、オープンソースのコンテンツ管理システムです。baserCMS 用プラグイン「アップローダー」には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2016-4887 91393 4 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000183.html  View