Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()     (CVE-2014-9087)

  - libksba: Out-of-bounds read in _ksba_ber_parse_tl (CVE-2016-4579)

  - ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows     remote attackers to cause a denial of service (abort) via crafted BER data. (CVE-2016-4353)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()     (CVE-2014-9087)

  - libksba: Out-of-bounds read in _ksba_ber_parse_tl (CVE-2016-4579)

  - ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows     remote attackers to cause a denial of service (abort) via crafted BER data. (CVE-2016-4353)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()     (CVE-2014-9087)

  - libksba: Out-of-bounds read in _ksba_ber_parse_tl (CVE-2016-4579)

  - ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows     remote attackers to cause a denial of service (abort) via crafted BER data. (CVE-2016-4353)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Updated libksba packages fix security vulnerability :

By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could lead to a denial of service (CVE-2014-9087).

A vulnerability has been fixed in the libksba X.509 and CMS support library :

CVE-2014-9087 Fix buffer overflow in ksba_oid_to_str reported by Hanno B&ouml;ck.

We recommend that you upgrade your libksba packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This libksba update fixes the following security issue :

  - bnc#907074: buffer overflow in OID processing     (CVE-2014-9087)

This libksba update fixes the following security issue :

  - buffer overflow in ksba_oid_to_str (CVE-2014-9087).
    (bnc#907074)

Minor update from upstream fixing moderate impact security issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2427-1 advisory.

    Hanno Bck discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data.
    An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly

    execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An integer underflow flaw, leading to a heap-based buffer overflow, was found in the ksba_oid_to_str() function of libksba, an X.509 and CMS (PKCS#7) library. By using special crafted S/MIME messages or ECC based OpenPGP data, it is possible to create a buffer overflow, which could cause an application using libksba to crash (denial of service), or potentially, execute arbitrary code.

ID	Name	Product	Family	Severity
198826	RHEL 6 : libksba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198812	RHEL 7 : libksba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198793	RHEL 5 : libksba (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
82404	Mandriva Linux Security Advisory : libksba (MDVSA-2015:151)	Nessus	Mandriva Local Security Checks	medium
82124	Debian DLA-141-1 : libksba security update	Nessus	Debian Local Security Checks	medium
80212	openSUSE Security Update : libksba (openSUSE-SU-2014:1682-1)	Nessus	SuSE Local Security Checks	medium
80166	SuSE 11.3 Security Update : libksba (SAT Patch Number 10087)	Nessus	SuSE Local Security Checks	medium
79788	Fedora 21 : libksba-1.3.2-1.fc21 (2014-15863)	Nessus	Fedora Local Security Checks	medium
79786	Fedora 19 : libksba-1.3.2-1.fc19 (2014-15838)	Nessus	Fedora Local Security Checks	medium
79752	Fedora 20 : libksba-1.3.2-1.fc20 (2014-15847)	Nessus	Fedora Local Security Checks	medium
79630	Mandriva Linux Security Advisory : libksba (MDVSA-2014:234)	Nessus	Mandriva Local Security Checks	medium
79623	Ubuntu 14.04 LTS : Libksba vulnerability (USN-2427-1)	Nessus	Ubuntu Local Security Checks	critical
79600	Debian DSA-3078-1 : libksba - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-9087

critical

Tenable Plugins

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium