Search for packages
| purl | pkg:deb/debian/libksba@1.0.0-1 |
| Next non-vulnerable version | 1.5.0-3+deb11u2 |
| Latest non-vulnerable version | 1.5.0-3+deb11u2 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2k1z-c7zj-8kc7
Aliases: CVE-2016-4353 |
libksba: denial of service due to stack overflow in src/ber-decoder.c (push_decoder_state, pop_decoder_state) |
Affected by 2 other vulnerabilities. |
|
VCID-3fjq-1b8h-f3dn
Aliases: CVE-2016-4579 |
Multiple vulnerabilities have been found in libksba which might allow remote attackers to obtain sensitive information or crash an libksba-based application. |
Affected by 2 other vulnerabilities. |
|
VCID-4fcw-qdwc-4ycd
Aliases: CVE-2014-9087 |
security update |
Affected by 9 other vulnerabilities. Affected by 8 other vulnerabilities. |
|
VCID-7p37-h69u-kkam
Aliases: CVE-2016-4356 |
libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv) |
Affected by 2 other vulnerabilities. |
|
VCID-hj28-x236-9ufu
Aliases: CVE-2016-4354 |
libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s) |
Affected by 2 other vulnerabilities. |
|
VCID-hkv6-bqra-k7hp
Aliases: CVE-2016-4574 |
libksba: Incomplete fix for CVE-2016-4356 |
Affected by 2 other vulnerabilities. |
|
VCID-natd-8zu1-kkba
Aliases: CVE-2022-3515 |
An integer overflow vulnerability has been found in libksba which could result in remote code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-suva-8fdh-6fby
Aliases: CVE-2016-4355 |
libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s) |
Affected by 2 other vulnerabilities. |
|
VCID-ywyd-pve8-ybhm
Aliases: CVE-2022-47629 |
An integer overflow vulnerability has been found in libksba which could result in remote code execution. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-h2ef-5mj3-t7ay | The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature. |
CVE-2006-5111
|