VULNERABILITY INTELLIGENCE

CVE-2016-4354

CVSS score7.5 HIGH

EPSS probability1.87%

CISA KEVNot currently listed

Published2016-06-13

Last modified2026-06-17

Description

ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.