CVE-2016-2053 in Android

Resumen (Inglés)

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2016-01-25

Divulgación

2016-05-02

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
91446	Google Android Kernel ASN.1 Decoder cifrado débil	310	No está definido	Arreglo oficial	CVE-2016-2053
83139	Linux Kernel ASN.1 BER asn1_decoder.c public_key_verify_signature Panic cifrado débil	310	No está definido	Arreglo oficial	CVE-2016-2053

Fuentes

• MITRE
• NVD
• CVE Details