DEBIAN-CVE-2016-2053

DEBIAN-CVE-2016-2053 PUBLISHED CVSS 4.699999809265137 MEDIUM

The asn1_ber_decoder function in lib/asn1_decoder.c in the Linux kernel before 4.3 allows attackers to cause a denial of service (panic) via an ASN.1 BER file that lacks a public key, leading to mishandling by the public_key_verify_signature function in crypto/asymmetric_keys/public_key.c.

Risk Scores

CVSS v3.0

4.699999809265137

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:13	linux	0, 0, 0
Debian:11	linux	0, 0, 0
Debian:12	linux	0, 0, 0
Debian:14	linux	0, 0, 0

Timeline

May 2, 2016 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-2053 advisory

Open in Interactive Console →