CVE-2016-4353 in Libksbainfo

Summary

ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service (abort) via crafted BER data.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

04/29/2016

Disclosure

06/13/2016

Entries

1

CPE

ready

CWE

CWE-20

CVSS

7.5

EPSS

0.01078

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-4353
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-4353
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-4353/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!