MGASA-2016-0310
Updated libksba packages fix security vulnerability
It was found that an unproportionate amount of memory is allocated when parsing crafted certificates in libskba, which may lead to DoS. Moreover in libksba 1.3.4, allocated memory is uninitialized and could potentially contain sensitive data left in freed memory block.
What each source reports
OSV No score
Updated libksba packages fix security vulnerability
It was found that an unproportionate amount of memory is allocated when parsing crafted certificates in libskba, which may lead to DoS. Moreover in libksba 1.3.4, allocated memory is uninitialized and could potentially contain sensitive data left in freed memory block.
- Record
MGASA-2016-0310- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libksbaMageia:5 |
before 1.3.5-1.mga5 | 1.3.5-1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2016-0310 is a vulnerability with no CVSS score yet in libksba, published September 21, 2016. No source lists public exploit code. Fixed in libksba 1.3.5-1.mga5.