CVE-2016-4353
Fixed in a distro release EPSS 2%
ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service (abort) via crafted BER data.
Products: gnupg libksba, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libksba | 1.3.3-1 |
| Debian 13 | libksba | 1.3.3-1 |
| Debian 14 | libksba | 1.3.3-1 |
| Ubuntu 14.04 LTS | libksba | 1.3.0-3ubuntu0.14.04.2 |
| Ubuntu 16.04 LTS | libksba | 1.3.3-1ubuntu0.16.04.1 |