An integer overflow vulnerability has been found in libksba which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libksba | * | < 1.6.3 | >= 1.6.3 |
Libksba is a X.509 and CMS (PKCS#7) library.
An integer overflow in parsing ASN.1 objects could lead to a buffer overflow.
Crafted ASN.1 objects could trigger an integer overflow and buffer overflow to result in remote code execution.
There is no known workaround at this time.
All libksba users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libksba-1.6.3"
An integer overflow vulnerability has been found in libksba which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libksba | * | < 1.6.2 | >= 1.6.2 |
Libksba is a X.509 and CMS (PKCS#7) library.
An integer overflow in parsing ASN.1 objects could lead to a buffer overflow.
Crafted ASN.1 objects could trigger an integer overflow and buffer overflow to result in remote code execution.
There is no known workaround at this time.
All libksba users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libksba-1.6.2"
Multiple vulnerabilities have been found in libksba which might allow remote attackers to obtain sensitive information or crash an libksba-based application.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libksba | * | < 1.3.5 | >= 1.3.5 |
Libksba is a X.509 and CMS (PKCS#7) library.
It was found that an unproportionate amount of memory is allocated when parsing crafted certificates in libskba, which may lead to Denial of Service condition.
Moreover in libksba 1.3.4, allocated memory is uninitialized and could potentially contain sensitive data left in freed memory block.
A remote attacker, able to interact with an libksba-based application, could possibly obtain sensitive information or cause a Denial of Service condition.
There is no known workaround at this time.
All libksba users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libksba-1.3.5"
Multiple vulnerabilities have been found in libksba, allowing a possible Denial of Service and unspecified other vectors through integer overflows.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-libs/libksba | * | < 1.3.3 | >= 1.3.3 |
Libksba is a X.509 and CMS (PKCS#7) library.
libksba is vulnerable to two integer overflows and a Denial of Service vulnerability. Please read the references for additional details.
Remote attackers could cause Denial of Service or unspecified other vectors through various integer overflows.
There is no known workaround at this time.
All libksba users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-libs/libksba-1.3.3"