CVE-2016-4354

Publication date

2016-06-13 19:00:00

Family

redhat

State

PUBLISHED

Description

ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.