CVE-2022-3515

CVE-2022-3515 affects the Libksba library, caused by an integer overflow in the CRL parser. The vulnerability can be exploited remotely by sending specially crafted data (for example, a malicious S/MIME attachment) to achieve code execution on the target system. Several connected advisories note ...

CVE-2022-47629

The CVE-2022-47629 entry concerns the libksba library (before 1.6.3) with an integer overflow vulnerability in the CRL signature parser. Multiple connected advisories confirm the same issue and its fix: upgrading to libksba 1.6.3 or newer resolves the problem. Documented references from Linux dis...

CVE-2014-9087

CVE-2014-9087: Libksba’s ksba_oid_to_str() has an integer underflow pre-1.3.2, used by GnuPG, enabling a crafted OID in S/MIME or ECC OpenPGP data to trigger a crash (DoS) or potential overflow. Affected: Libksba/libksba_oid_to_str; Fix: upgrade to Libksba 1.3.2 or newer. No exploit details in pr...

CVE-2016-4355

CVE-2016-4355 is a vulnerability in Libksba prior to 1.3.3 where multiple integer overflows in ber-decoder.c allow remote attackers to trigger a denial of service (crash) via crafted BER data, which can lead to a buffer overflow. The connected documents corroborate that the issue affects Libksba’...

CVE-2016-4356

CVE-2016-4356 affects Libksba’s DN decoder (dn.c) with the append_utf8_value function: older releases before 1.3.3 may incur an out-of-bounds read when the high bit of a byte after invalid UTF-8 data is cleared, enabling denial of service. Several connected advisories/plugins reference this issue...

CVE-2016-4353

Libksba vulnerability CVE-2016-4353 affects ber-decoder.c in Libksba prior to 1.3.3, where decoder stack overflows are not properly handled, enabling remote denial of service via crafted BER data. Affected: Libksba versions before 1.3.3 (see OSV and Nessus entries). Impact is a denial of service ...

CVE-2016-4574

CVE-2016-4574 affects Libksba before 1.3.4, where an off-by-one/error in the DN decoder’s append_utf8_value can cause an out-of-bounds read leading to denial of service when processing invalid UTF-8 data. The vulnerability stems from an incomplete fix for CVE-2016-4356. Connected advisories (Debi...

CVE-2016-4579

Libksba - CVE-2016-4579: A vulnerability in Libksba prior to 1.3.4 allows remote attackers to trigger a denial of service via an out-of-bounds read in the BER parsing path (_ksba_ber_parse_tl). Impact is a crash/DoS. Connected sources confirm the issue is present across affected distributions (e....

CVE-2016-4354

CVE-2016-4354 affects Libksba prior to 1.3.3. The ber-decoder.c component uses an incorrect integer data type, allowing remote attackers to crash the process and cause a buffer overflow via crafted BER data. The issue is documented across multiple sources (OSV/OSVDEV, NVD references). Affected ve...