Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-9087
HistoryDec 01, 2014 - 3:59 p.m.

CVE-2014-9087

2014-12-0115:59:11
CWE-191
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

Affected configurations

NVD
Node
mageiamageiaMatch3.0
OR
mageiamageiaMatch4.0
Node
debiandebian_linuxMatch7.0
OR
debiandebian_linuxMatch8.0
Node
gnupglibksbaRange<1.3.2
Node
canonicalubuntu_linuxMatch12.04esm
OR
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch14.10
Node
gnupggnupgMatch2.1.0-
OR
gnupggnupgMatch2.1.0beta1

Related

nessus 13
securityvulns 2
osv 2
openvas 10
cve 1
fedora 3
prion 1
mageia 1
debian 3
archlinux 2
cvelist 1
ubuntucve 1
ubuntu 1
debiancve 1
ibm 2
nessus
nessus
Debian DSA-3078-1 : libksba - security update
2014-11-28 00:00:00
Debian DLA-141-1 : libksba security update
2015-03-26 00:00:00
Fedora 20 : libksba-1.3.2-1.fc20 (2014-15847)
2014-12-06 00:00:00
securityvulns
securityvulns
libksba buffer overflow
2014-11-30 00:00:00
[ MDVSA-2014:234 ] libksba
2014-11-30 00:00:00
osv
osv
libksba - security update
2015-01-29 00:00:00
libksba - security update
2014-11-27 00:00:00
openvas
openvas
Fedora Update for libksba FEDORA-2014-15847
2014-12-06 00:00:00
Debian: Security Advisory (DSA-3078-1)
2014-11-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0030-1)
2021-04-19 00:00:00
cve
cve
CVE-2014-9087
2014-12-01 15:59:11
fedora
fedora
[SECURITY] Fedora 20 Update: libksba-1.3.2-1.fc20
2014-12-06 02:33:55
[SECURITY] Fedora 21 Update: libksba-1.3.2-1.fc21
2014-12-06 10:32:27
[SECURITY] Fedora 19 Update: libksba-1.3.2-1.fc19
2014-12-07 04:38:37
prion
prion
Integer overflow
2014-12-01 15:59:00
mageia
mageia
Updated libksba packages fix security vulnerability
2014-11-26 20:29:06
debian
debian
[SECURITY] [DLA 141-1] libksba security update
2015-01-28 23:05:38
[SECURITY] [DSA 3078-1] libksba security update
2014-11-27 16:55:41
[SECURITY] [DSA 3078-1] libksba security update
2014-11-27 16:55:41
archlinux
archlinux
libksba: denial of service
2014-11-28 00:00:00
gnupg: denial of service
2014-12-01 00:00:00
cvelist
cvelist
CVE-2014-9087
2014-12-01 15:00:00
ubuntucve
ubuntucve
CVE-2014-9087
2014-11-26 00:00:00
ubuntu
ubuntu
Libksba vulnerability
2014-11-27 00:00:00
debiancve
debiancve
CVE-2014-9087
2014-12-01 15:59:11
ibm
ibm
Security Bulletin: Open Source GNU glibc vulnerabilities on IBM SONAS (CVE-2014-7817, CVE-2014-9087)
2018-06-18 00:09:22
Security Bulletin: Open Source GNU glibc vulnerabilities on IBM Storwize V7000 Unified (CVE-2014-7817, CVE-2014-9087)
2018-06-18 00:09:10

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON
Related for NVD:CVE-2014-9087
nessus13securityvulns2osv2openvas10cve1fedora3prion1mageia1debian3archlinux2cvelist1ubuntucve1ubuntu1debiancve1ibm2