CVE:CVE-2014-9087
CNNVD:CNNVD-201411-488
Libksba是GNU计划开发的GnuPG项目中的一个可简单化X.509证书、CMS数据和相关对象的工作任务的库。
GnuPG中使用的Libksba 1.3.1及之前版本中的‘ksba_oid_to_str’函数存在整数溢出漏洞。远程攻击者可借助S/MIME消息或ECC based OpenPGP数据中的OID利用该漏洞造成拒绝服务（崩溃）。
solution:Upgrade mageia mageia to a higher version than 3.0,4.0,and avoid the version 3.0,4.0; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade gnupg libksba to a higher version than 1.3.2,and avoid the version (,1.3.2); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,14.10,and avoid the version 12.04,14.04,14.10; Upgrade gnupg gnupg to a higher version than 2.1.0,2.1.0:beta1,and avoid the version 2.1.0,2.1.0:beta1