Back to search
CVE-2016-2053
Published: May 2, 2016
Modified: Aug 5, 2024
PUBLISHED
Description
The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
SUSE-SU-2016:1690
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2010
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2011
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2003
vendor-advisory
x_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=1300237
x_refsource_CONFIRM
SUSE-SU-2016:1994
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1961
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2001
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1985
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2016:2184
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2006
vendor-advisory
x_refsource_SUSE
[oss-security] 20160125 Re: Linux kernel : Denial of service with specially crafted key file.
mailing-list
x_refsource_MLIST
RHSA-2016:2584
vendor-advisory
x_refsource_REDHAT
SUSE-SU-2016:2014
vendor-advisory
x_refsource_SUSE
RHSA-2016:2574
vendor-advisory
x_refsource_REDHAT
openSUSE-SU-2016:1641
vendor-advisory
x_refsource_SUSE
1036763
vdb-entry
x_refsource_SECTRACK
SUSE-SU-2016:1672
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2009
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2005
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2007
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2000
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1995
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2105
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:2002
vendor-advisory
x_refsource_SUSE
SUSE-SU-2016:1937
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now