Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote     attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based     OpenPGP data, which triggers a buffer overflow. (CVE-2014-9087)

Note that Nessus relies on the presence of the package as reported by the vendor.

Updated libksba packages fix security vulnerability :

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could lead to a denial of service (CVE-2014-9087).

A vulnerability has been fixed in the libksba X.509 and CMS support library :

CVE-2014-9087 Fix buffer overflow in ksba_oid_to_str reported by Hanno B&ouml;ck.

We recommend that you upgrade your libksba packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This libksba update fixes the following security issue :

  - bnc#907074: buffer overflow in OID processing     (CVE-2014-9087)

This libksba update fixes the following security issue :

  - buffer overflow in ksba_oid_to_str (CVE-2014-9087).
    (bnc#907074)

Minor update from upstream fixing moderate impact security issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2427-1 advisory.

    Hanno Bck discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data.
    An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly

    execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An integer underflow flaw, leading to a heap-based buffer overflow, was found in the ksba_oid_to_str() function of libksba, an X.509 and CMS (PKCS#7) library. By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could cause an application using libksba to crash (denial of service), or potentially, execute arbitrary code.

ID	Name	Product	Family	Type	Severity
218460	Linux Distros Unpatched Vulnerability : CVE-2014-9087	Nessus	Misc.	Local	critical
82404	Mandriva Linux Security Advisory : libksba (MDVSA-2015:151)	Nessus	Mandriva Local Security Checks	Local	medium
82124	Debian DLA-141-1 : libksba security update	Nessus	Debian Local Security Checks	Local	medium
80212	openSUSE Security Update : libksba (openSUSE-SU-2014:1682-1)	Nessus	SuSE Local Security Checks	Local	medium
80166	SuSE 11.3 Security Update : libksba (SAT Patch Number 10087)	Nessus	SuSE Local Security Checks	Local	medium
79788	Fedora 21 : libksba-1.3.2-1.fc21 (2014-15863)	Nessus	Fedora Local Security Checks	Local	medium
79786	Fedora 19 : libksba-1.3.2-1.fc19 (2014-15838)	Nessus	Fedora Local Security Checks	Local	medium
79752	Fedora 20 : libksba-1.3.2-1.fc20 (2014-15847)	Nessus	Fedora Local Security Checks	Local	medium
79630	Mandriva Linux Security Advisory : libksba (MDVSA-2014:234)	Nessus	Mandriva Local Security Checks	Local	medium
79623	Ubuntu 14.04 LTS : Libksba vulnerability (USN-2427-1)	Nessus	Ubuntu Local Security Checks	Local	critical
79600	Debian DSA-3078-1 : libksba - security update	Nessus	Debian Local Security Checks	Local	medium

Detections

Analytics

CVE-2014-9087

critical

Tenable Plugins

critical

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium