CVE-2014-9087 Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (...
HighCVSS 7.5
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libksba(Debian:12) | < 1.3.2-1 | 1.3.2-1 |
| debian/libksba(Debian:13) | < 1.3.2-1 | 1.3.2-1 |
| debian/libksba(Debian:14) | < 1.3.2-1 | 1.3.2-1 |
| mageia | = 3.0 | No fix listed |
| mageia | = 4.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| gnupg libksba | < 1.3.2 | 1.3.2 |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
| GnuPG | = 2.1.0 | No fix listed |
| GnuPG | = 2.1.0-beta1 | No fix listed |
References
- Debian Security Tracker CVE-2014-9087 vendor-advisory
- advisories.mageia.org third-party-advisory
- [gnupg-announce] 20141125 [Announce] [security fix] Libksba 1.3.2 for GnuPG released mailing-list vendor-advisory
- 60073 third-party-advisory
- 60189 third-party-advisory
- 60233 third-party-advisory
- DSA-3078 third-party-advisory vendor-advisory
- MDVSA-2014:234 not-applicable vendor-advisory
- MDVSA-2015:151 not-applicable vendor-advisory
- 71285 third-party-advisory vdb-entry
- USN-2427-1 patch third-party-advisory vendor-advisory
- blog.fuzzing-project.org third-party-advisory
- bugs.debian.org issue-tracking