Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-4356

Опубликовано: 08 апр. 2015
Источник: redhat
CVSS2: 5.1

Описание

The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libksbaWill not fix
Red Hat Enterprise Linux 6libksbaWill not fix
Red Hat Enterprise Linux 7libksbaWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=1211259libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv)

5.1 Medium

CVSS2

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 10 лет назад

The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

CVSS3: 7.5
nvd
больше 10 лет назад

The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

CVSS3: 7.5
debian
больше 10 лет назад

The append_utf8_value function in the DN decoder (dn.c) in Libksba bef ...

CVSS3: 7.5
github
больше 4 лет назад

The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

CVSS3: 7.5
altlinux
больше 2 лет назад

ALT-PU-2015-2843: package `libksba` update to version 1.3.3-alt1

5.1 Medium

CVSS2