Oval Definition:oval:com.ubuntu.trusty:def:20149087000
Revision Date:2014-12-01Version:1
Title:CVE-2014-9087 on Ubuntu 14.04 LTS (trusty) - medium.
Description:Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-9087
Platform(s):Ubuntu 14.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 14.04 LTS (trusty) is installed.
  • AND Package Information
  • NOT While related to the CVE in some way, the 'gnupg2' package in trusty is not affected.
  • OR The 'libksba' package in trusty was vulnerable but has been fixed (note: '1.3.0-3ubuntu0.14.04.1').
    • BACK