High severity7.5NVD Advisory· Published Jun 13, 2016· Updated Jun 17, 2026

CVE-2016-4574

Description

Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gnupg/Libksba
cpe:2.3:a:gnupg:libksba:*:*:*:*:*:*:*:*
Range: <=1.3.3
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
OpenSUSE/Leap
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
OpenSUSE/openSUSE
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
Libksba Library/Libksba Libraryllm-fuzzy
Range: <1.3.4
osv-coords12 versions
pkg:rpm/opensuse/libksba&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012 pkg:rpm/suse/libksba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1
< 1.3.5-1.3+ 11 more
- (no CPE)range: < 1.3.5-1.3
- (no CPE)range: < 1.3.0-23.1
- (no CPE)range: < 1.3.0-23.1
- (no CPE)range: < 1.0.4-1.25.1
- (no CPE)range: < 1.3.0-23.1
- (no CPE)range: < 1.3.0-23.1
- (no CPE)range: < 1.0.4-1.25.1
- (no CPE)range: < 1.3.0-23.1
- (no CPE)range: < 1.3.0-23.1
- (no CPE)range: < 1.0.4-1.25.1
- (no CPE)range: < 1.3.0-23.1
- (no CPE)range: < 1.3.0-23.1

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2016-4574

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions