CVE-2014-9087

NameCVE-2014-9087
DescriptionInteger underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-141-1, DSA-3078-1
Debian Bugs770972

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
gnupg2 (PTS)buster, buster (security)2.2.12-1+deb10u2fixed
bullseye (security), bullseye2.2.27-2+deb11u2fixed
sid, trixie, bookworm2.2.40-1.1fixed
libksba (PTS)buster1.3.5-2fixed
buster (security)1.3.5-2+deb10u2fixed
bullseye (security), bullseye1.5.0-3+deb11u2fixed
bookworm1.6.3-2fixed
sid, trixie1.6.5-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
gnupg2source(unstable)(not affected)
libksbasourcesqueeze1.0.7-2+deb6u1DLA-141-1
libksbasourcewheezy1.2.0-2+deb7u1DSA-3078-1
libksbasource(unstable)1.3.2-1770972

Notes

- gnupg2 <not-affected> (Fixed before entering unstable; affected only 2.1 and betas)
http://lists.gnupg.org/pipermail/gnupg-announce/2014q4/000359.html
Upstream commit: http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=f715b9e156dfa99ae829fc694e5a0abd23ef97d7

Search for package or bug name: Reporting problems