The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libksba: Out-of-bounds read in _ksba_ber_parse_tl (CVE-2016-4579)

  - ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows     remote attackers to cause a denial of service (abort) via crafted BER data. (CVE-2016-4353)

  - ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers     to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.
    (CVE-2016-4354)

  - Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a     denial of service (crash) via crafted BER data, which leads to a buffer overflow. (CVE-2016-4355)

  - The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to     cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8     encoded data. (CVE-2016-4356)

  - Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows     remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE:
    this vulnerability exists because of an incomplete fix for CVE-2016-4356. (CVE-2016-4574)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the libksba package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The append_utf8_value function in the DN decoder (dn.c)     in Libksba before 1.3.3 allows remote attackers to     cause a denial of service (out-of-bounds read) by     clearing the high bit of the byte after invalid utf-8     encoded data.(CVE-2016-4356)

  - Off-by-one error in the append_utf8_value function in     the DN decoder (dn.c) in Libksba before 1.3.4 allows     remote attackers to cause a denial of service     (out-of-bounds read) via invalid utf-8 encoded data.
    NOTE: this vulnerability exists because of an     incomplete fix for CVE-2016-4356.(CVE-2016-4574)

  - Libksba before 1.3.4 allows remote attackers to cause a     denial of service (out-of-bounds read and crash) via     unspecified vectors, related to the 'returned length of     the object from _ksba_ber_parse_tl.'(CVE-2016-4579)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Hanno Bock discovered that Libksba incorrectly handled decoding certain BER data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service. This issue only applied to Ubunt 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-4353)

Hanno Bock discovered that Libksba incorrectly handled decoding certain BER data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubunt 12.04 LTS and Ubuntu 14.04 LTS.
(CVE-2016-4354, CVE-2016-4355)

Hanno Bock discovered that Libksba incorrectly handled incorrect utf-8 strings when decoding certain DN data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubunt 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-4356)

Pascal Cuoq discovered that Libksba incorrectly handled incorrect utf-8 strings when decoding certain DN data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-4574)

Pascal Cuoq discovered that Libksba incorrectly handled decoding certain data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service. (CVE-2016-4579).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libksba fixes the following issues :

Security issue fixed :

  - boo#979261: OOB read access bugs remote DoS

  - CVE-2016-4574: off-by-one OOB read access (incomplete     fix for CVE-2016-4356)

Martin Prpic, Red Hat Product Security Team, reports :

Denial of Service due to stack overflow in src/ber-decoder.c.

Integer overflow in the BER decoder src/ber-decoder.c.

Integer overflow in the DN decoder src/dn.c.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libksba: Out-of-bounds read in _ksba_ber_parse_tl (CVE-2016-4579)

  - libksba: integer overflow to code execution (CVE-2022-47629)

  - ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows     remote attackers to cause a denial of service (abort) via crafted BER data. (CVE-2016-4353)

  - ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers     to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.
    (CVE-2016-4354)

  - Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a     denial of service (crash) via crafted BER data, which leads to a buffer overflow. (CVE-2016-4355)

  - The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to     cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8     encoded data. (CVE-2016-4356)

  - Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows     remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE:
    this vulnerability exists because of an incomplete fix for CVE-2016-4356. (CVE-2016-4574)

  - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The     vulnerability can be exploited remotely for code execution on the target system by passing specially     crafted data to the application, for example, a malicious S/MIME attachment. (CVE-2022-3515)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libksba: Out-of-bounds read in _ksba_ber_parse_tl (CVE-2016-4579)

  - ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows     remote attackers to cause a denial of service (abort) via crafted BER data. (CVE-2016-4353)

  - ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers     to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.
    (CVE-2016-4354)

  - Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a     denial of service (crash) via crafted BER data, which leads to a buffer overflow. (CVE-2016-4355)

  - The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to     cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8     encoded data. (CVE-2016-4356)

  - Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows     remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE:
    this vulnerability exists because of an incomplete fix for CVE-2016-4356. (CVE-2016-4574)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
195566	RHEL 7 : libksba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
145213	EulerOS 2.0 SP3 : libksba (EulerOS-SA-2021-1086)	Nessus	Huawei Local Security Checks	1/20/2021	1/29/2024	high
146660	EulerOS 2.0 SP2 : libksba (EulerOS-SA-2021-1317)	Nessus	Huawei Local Security Checks	2/22/2021	1/19/2024	high
91220	Ubuntu 14.04 LTS / 16.04 LTS : Libksba vulnerabilities (USN-2982-1)	Nessus	Ubuntu Local Security Checks	5/18/2016	10/20/2023	high
146120	EulerOS 2.0 SP5 : libksba (EulerOS-SA-2021-1203)	Nessus	Huawei Local Security Checks	2/4/2021	1/24/2024	high
91289	openSUSE Security Update : libksba (openSUSE-2016-624)	Nessus	SuSE Local Security Checks	5/23/2016	1/19/2021	high
90848	FreeBSD : libksba -- local denial of service vulnerabilities (a1134048-10c6-11e6-94fa-002590263bf5)	Nessus	FreeBSD Local Security Checks	5/3/2016	1/4/2021	high
195515	RHEL 6 : libksba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
195580	RHEL 5 : libksba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

critical

high