66 matches found
Design/Logic Flaw
The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service memory consumption via unspecified vectors, related to a length field...
UBUNTU-CVE-2015-5727
The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service memory consumption via unspecified vectors, related to a length field...
UBUNTU-CVE-2015-5726
The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service application crash via an empty BIT STRING in ASN.1 data...
CVE-2015-5726
The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service application crash via an empty BIT STRING in ASN.1 data...
CVE-2015-5727
CVE-2015-5727 affects Botan BER decoder. Multiple connected advisories (Debian DSA-3565, OpenVAS NASL) confirm the issue: the BER decoder could allocate a large amount of memory when processing a length field, enabling a denial of service through memory exhaustion. Affected: Botan 1.10.x before 1...
CVE-2015-5726
The CVE-2015-5726 issue affects Botan BER decoder: an empty BIT STRING in ASN.1 data can cause a remote denial of service (application crash) in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19. Debian advisories confirm fixes for botan1.10 in Jessie (upgrade to 1.10.8-2+deb8u1). If applicab...
CVE-2015-5726
Removed by vendor...
CVE-2015-5727
The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service memory consumption via unspecified vectors, related to a length field...
Botan BER Decoder Denial of Service Vulnerability
Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. The Botan BER decoder fails to properly allocate memory for the 'length' field, allowing remote attackers to exploit the vulnerability by submitting a special request to invoke the OOM...
Libksba Stack Buffer Overflow Vulnerability
Libksba is a library that simplifies work tasks for X.509 certificates, CMS data and related objects in the GnuPG project developed by the GNU Project. A stack buffer overflow vulnerability exists in the src/ber-decoder.c file of Libksba. A remote attacker could exploit this vulnerability to caus...
Libksba integer overflow vulnerability (CNVD-2016-02854)
Libksba is a library that simplifies work tasks for X.509 certificates, CMS data and related objects in the GnuPG project developed by the GNU Project. An integer overflow vulnerability exists in the BER decoder src/ber-decoder.c file in Libksba. A remote attacker could exploit this vulnerability...
Debian DSA-3565-1 : botan1.10 - security update
Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, including encryption, authentication, X.509v3 certificates and CRLs. - CVE-2015-5726 The BER decoder would crash due to reading from offset 0 of an empty vector...
[SECURITY] [DSA 3565-1] botan1.10 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3565-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 02, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3565-1 (botan1.10 - security update)
Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, including encryption, authentication, X.509v3 certificates and CRLs. CVE-2015-5726 The BER decoder would crash due to reading from offset 0 of an empty vector i...
DSA-3565-1 botan1.10 - security update
Bulletin has no description...
[SECURITY] [DLA 449-1] botan1.10 security update
Package : botan1.10 Version : 1.10.5-1+deb7u1 CVE ID : CVE-2014-9742 CVE-2015-5726 CVE-2015-5727 CVE-2015-7827 CVE-2016-2194 CVE-2016-2195 CVE-2016-2849 Several security vulnerabilities were found in botan1.10, a C++ library which provides support for many common cryptographic operations, includi...
PT-2016-5901 · Kde +2 · Libksba +2
Name of the Vulnerable Software and Affected Versions: Libksba versions prior to 1.3.3 Description: The issue is caused by multiple integer overflows in the ber-decoder.c file, allowing remote attackers to cause a denial of service crash via crafted BER data. This leads to a buffer overflow...
PT-2016-5900 · Kde +2 · Libksba +2
Name of the Vulnerable Software and Affected Versions: Libksba versions prior to 1.3.3 Description: The issue is caused by an incorrect integer data type used in the ber-decoder.c file, which allows remote attackers to cause a denial of service crash via crafted BER data. This leads to a buffer...
PT-2016-5899 · Kde +2 · Libksba +2
Name of the Vulnerable Software and Affected Versions: Libksba versions prior to 1.3.3 Description: The issue arises from improper handling of decoder stack overflows in the ber-decoder.c file, allowing remote attackers to cause a denial of service abort by sending crafted BER data...