[SECURITY] [DLA 141-1] libksba security update

Package : libksba Version : 1.0.7-2+deb6u1 CVE ID : CVE-2014-9087 A vulnerability has been fixed in the libksba X.509 and CMS support library: CVE-2014-9087 Fix buffer overflow in ksbaoidtostr reported by Hanno Böck. We recommend that you upgrade your libksba packages...

DLA-141-1 libksba - security update

Bulletin has no description...

Fedora Update for libksba FEDORA-2014-15863

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libksba (openSUSE-SU-2014:1682-1)

This libksba update fixes the following security issue : - bnc907074: buffer overflow in OID processing CVE-2014-9087 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-799. The tex...

SuSE 11.3 Security Update : libksba (SAT Patch Number 10087)

This libksba update fixes the following security issue : - buffer overflow in ksbaoidtostr CVE-2014-9087. bnc907074 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

Fedora Update for libksba FEDORA-2014-15838

Check the version of libksba SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868560";...

Fedora 21 : libksba-1.3.2-1.fc21 (2014-15863)

Minor update from upstream fixing moderate impact security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 19 : libksba-1.3.2-1.fc19 (2014-15838)

Minor update from upstream fixing moderate impact security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 21 Update: libksba-1.3.2-1.fc21

KSBA pronounced Kasbah is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS...

[SECURITY] Fedora 20 Update: libksba-1.3.2-1.fc20

KSBA pronounced Kasbah is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS...

Fedora 20 : libksba-1.3.2-1.fc20 (2014-15847)

Minor update from upstream fixing moderate impact security issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for libksba FEDORA-2014-15847

Check the version of libksba SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868552";...

CVE-2014-9087

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

CVE-2014-9087

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

Integer overflow

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

CVE-2014-9087

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

CVE-2014-9087

CVE-2014-9087: Libksba’s ksba_oid_to_str() has an integer underflow pre-1.3.2, used by GnuPG, enabling a crafted OID in S/MIME or ECC OpenPGP data to trigger a crash (DoS) or potential overflow. Affected: Libksba/libksba_oid_to_str; Fix: upgrade to Libksba 1.3.2 or newer. No exploit details in pr...

CVE-2014-9087

Integer underflow in the ksbaoidtostr function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service crash via a crafted OID in a 1 S/MIME message or 2 ECC based OpenPGP data, which triggers a buffer overflow...

gnupg: denial of service

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow. The bug is not easy to exploit because there only 80 possible values which can be used to overwrite memory. However, a denial of service is possible and someone may come up with other...

Mandriva Linux Security Advisory : libksba (MDVSA-2014:234)

Updated libksba packages fix security vulnerability : By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could lead to a denial of service CVE-2014-9087. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...