CVE-2016-4356

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-43578.1HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecifi CVE-2016-43588.1HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors CVE-2016-43599.8Stack-based buffer overflow in mchan.dll in the agent in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3,CVE-2016-43609.1web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patc CVE-2016-43617.5HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Per CVE-2016-43628.1HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vecto CVE-2016-43636.1HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors.CVE-2016-43648.4HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors.CVE-2016-43657.5HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors.CVE-2016-43669.8HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of se CVE-2016-43677.5The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensit CVE-2016-43689.8HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 a