[{"CVE":"CVE-2016-4574","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":[],"bugzilla":"1334831","bugzilla_description":"CVE-2016-4574 libksba: Incomplete fix for CVE-2016-4356","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4574.json"},{"CVE":"CVE-2016-4579","severity":"moderate","public_date":"2016-05-10T00:00:00Z","advisories":[],"bugzilla":"1335396","bugzilla_description":"CVE-2016-4579 libksba: Out-of-bounds read in _ksba_ber_parse_tl","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4579.json"},{"CVE":"CVE-2016-4356","severity":"moderate","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211259","bugzilla_description":"CVE-2016-4356 libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-172","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4356.json"},{"CVE":"CVE-2016-4354","severity":"moderate","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211260","bugzilla_description":"CVE-2016-4354 CVE-2016-4355 libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4354.json"},{"CVE":"CVE-2016-4355","severity":"moderate","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211260","bugzilla_description":"CVE-2016-4354 CVE-2016-4355 libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4355.json"},{"CVE":"CVE-2016-4353","severity":"low","public_date":"2015-04-08T00:00:00Z","advisories":[],"bugzilla":"1211261","bugzilla_description":"CVE-2016-4353 libksba: denial of service due to stack overflow in src/ber-decoder.c (push_decoder_state, pop_decoder_state)","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4353.json"},{"CVE":"CVE-2014-9087","severity":"moderate","public_date":"2014-11-25T00:00:00Z","advisories":[],"bugzilla":"1168051","bugzilla_description":"CVE-2014-9087 libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":"CWE-190->CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9087.json"}]