Lucene search

K
osvGoogleOSV:DLA-141-1
HistoryJan 29, 2015 - 12:00 a.m.

libksba - security update

2015-01-2900:00:00
Google
osv.dev
5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability has been fixed in the libksba X.509 and CMS support library:

  • CVE-2014-9087
    Fix buffer overflow in ksba_oid_to_str reported by Hanno BĂśck.

For Debian 6 Squeeze, this issue has been fixed in libksba version 1.0.7-2+deb6u1

We recommend that you upgrade your libksba packages.

CPENameOperatorVersion
libksbaeq1.0.7-2

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P