{"schemaVersion":3,"id":"MGASA-2016-0310","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated libksba packages fix security vulnerability\n\nIt was found that an unproportionate amount of memory is allocated when\nparsing crafted certificates in libskba, which may lead to DoS.\nMoreover in libksba 1.3.4, allocated memory is uninitialized and could\npotentially contain sensitive data left in freed memory block.","dates":{"published":"2016-09-21T20:38:22.000Z","modified":"2026-04-16T04:27:39.822Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"libksba","name":"libksba","label":"libksba","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libksba","purlType":"rpm","versions":[{"text":"< 1.3.5-1.mga5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.5-1.mga5","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2016-0310.html","label":"advisories.mageia.org/MGASA-2016-0310.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19288","label":"bugs.mageia.org/show_bug.cgi?id=19288","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://openwall.com/lists/oss-security/2016/08/20/3","label":"openwall.com/lists/oss-security/2016/08/20/3","hostname":"openwall.com","tags":["WEB"]},{"url":"http://openwall.com/lists/oss-security/2016/08/22/7","label":"openwall.com/lists/oss-security/2016/08/22/7","hostname":"openwall.com","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KUORSGVTYHQQKX2AYN7ASGUMPKFCV3HJ/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2016-09-21T20:38:22.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:27:39.822Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T14:31:19.498Z","stale":false,"partial":false}}