FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
a1134048-10c6-11e6-94fa-002590263bf5	libksba -- local denial of service vulnerabilities Martin Prpic, Red Hat Product Security Team, reports: Denial of Service due to stack overflow in src/ber-decoder.c. Integer overflow in the BER decoder src/ber-decoder.c. Integer overflow in the DN decoder src/dn.c. Discovery 2015-04-08 Entry 2016-05-03 libksba < 1.3.3 CVE-2016-4353 CVE-2016-4354 CVE-2016-4355 CVE-2016-4356 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=07116a314f4dcd4d96990bbd74db95a03a9f650a http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=aea7b6032865740478ca4b706850a5217f1c3887 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=243d12fdec66a4360fbb3e307a046b39b5b4ffc3 https://security.gentoo.org/glsa/201604-04 http://www.openwall.com/lists/oss-security/2016/04/29/5

VuXML ID

Description

a1134048-10c6-11e6-94fa-002590263bf5

libksba -- local denial of service vulnerabilities

Martin Prpic, Red Hat Product Security Team, reports:

Denial of Service due to stack overflow in src/ber-decoder.c.

Integer overflow in the BER decoder src/ber-decoder.c.

Integer overflow in the DN decoder src/dn.c.

Discovery 2015-04-08
Entry 2016-05-03
libksba

< 1.3.3

CVE-2016-4353
CVE-2016-4354
CVE-2016-4355
CVE-2016-4356
http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=07116a314f4dcd4d96990bbd74db95a03a9f650a
http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=aea7b6032865740478ca4b706850a5217f1c3887
http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=243d12fdec66a4360fbb3e307a046b39b5b4ffc3
https://security.gentoo.org/glsa/201604-04
http://www.openwall.com/lists/oss-security/2016/04/29/5