The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2982-1 advisory.

    Hanno Bck discovered that Libksba incorrectly handled decoding certain BER data. An attacker could use     this issue to cause Libksba to crash, resulting in a denial of service. This issue only applied to Ubuntu     12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-4353)

    Hanno Bck discovered that Libksba incorrectly handled decoding certain BER data. An attacker could use     this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-4354, CVE-2016-4355)

    Hanno Bck discovered that Libksba incorrectly handled incorrect utf-8 strings when decoding certain DN     data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.
    (CVE-2016-4356)

    Pascal Cuoq discovered that Libksba incorrectly handled incorrect utf-8 strings when decoding certain DN     data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2016-4574)

    Pascal Cuoq discovered that Libksba incorrectly handled decoding certain data. An attacker could use this     issue to cause Libksba to crash, resulting in a denial of service. (CVE-2016-4579)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS : Libksba vulnerabilities (USN-2982-1)

high Nessus Plugin ID 91220

Version 2.13