CVE-2016-4574

Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service…

published June 13, 2016

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02761 · 86.1th percentile
Published
2016-06-13T19:00Z
EPSS history
Timeline
  • 13 JUN 19:00Z
    Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service…
    cvelistv5