Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-4355

Опубликовано: 08 апр. 2015
Источник: redhat
CVSS2: 5.1
EPSS Низкий

Описание

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libksbaWill not fix
Red Hat Enterprise Linux 6libksbaWill not fix
Red Hat Enterprise Linux 7libksbaWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=1211260libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)

EPSS

Процентиль: 78%
0.01866
Низкий

5.1 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 10 лет назад

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

CVSS3: 7.5
nvd
около 10 лет назад

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

CVSS3: 7.5
debian
около 10 лет назад

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 al ...

CVSS3: 7.5
github
больше 4 лет назад

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

EPSS

Процентиль: 78%
0.01866
Низкий

5.1 Medium

CVSS2