CVE-2016-4574

Name of the Vulnerable Software and Affected Versions Libksba versions prior to 1.3.4

Description The issue is caused by an off-by-one error in the append utf8 value function within the DN decoder (dn.c) in Libksba. This error allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data.

Recommendations For versions prior to 1.3.4, update to version 1.3.4 or later to resolve the issue. As a temporary workaround, consider restricting the input of utf-8 encoded data to prevent exploitation.