Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

Updated libksba packages fix security vulnerability :

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could lead to a denial of service (CVE-2014-9087).

A vulnerability has been fixed in the libksba X.509 and CMS support library :

CVE-2014-9087 Fix buffer overflow in ksba_oid_to_str reported by Hanno B&ouml;ck.

We recommend that you upgrade your libksba packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This libksba update fixes the following security issue :

  - bnc#907074: buffer overflow in OID processing     (CVE-2014-9087)

This libksba update fixes the following security issue :

  - buffer overflow in ksba_oid_to_str (CVE-2014-9087).
    (bnc#907074)

Minor update from upstream fixing moderate impact security issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Hanno Bock discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An integer underflow flaw, leading to a heap-based buffer overflow, was found in the ksba_oid_to_str() function of libksba, an X.509 and CMS (PKCS#7) library. By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could cause an application using libksba to crash (denial of service), or potentially, execute arbitrary code.

ID	Name	Product	Family	Severity
82404	Mandriva Linux Security Advisory : libksba (MDVSA-2015:151)	Nessus	Mandriva Local Security Checks	medium
82124	Debian DLA-141-1 : libksba security update	Nessus	Debian Local Security Checks	medium
80212	openSUSE Security Update : libksba (openSUSE-SU-2014:1682-1)	Nessus	SuSE Local Security Checks	medium
80166	SuSE 11.3 Security Update : libksba (SAT Patch Number 10087)	Nessus	SuSE Local Security Checks	medium
79788	Fedora 21 : libksba-1.3.2-1.fc21 (2014-15863)	Nessus	Fedora Local Security Checks	medium
79786	Fedora 19 : libksba-1.3.2-1.fc19 (2014-15838)	Nessus	Fedora Local Security Checks	medium
79752	Fedora 20 : libksba-1.3.2-1.fc20 (2014-15847)	Nessus	Fedora Local Security Checks	medium
79630	Mandriva Linux Security Advisory : libksba (MDVSA-2014:234)	Nessus	Mandriva Local Security Checks	medium
79623	Ubuntu 14.04 LTS : Libksba vulnerability (USN-2427-1)	Nessus	Ubuntu Local Security Checks	medium
79600	Debian DSA-3078-1 : libksba - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-9087

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium