Maniphest T8361

libksba: Possible infinite loop for untrusted input
Closed, ResolvedPublic
Actions

Assigned To
• gniibe
Authored By
• gniibe
Jul 21 2026, 8:16 AM
Tags
Subscribers
• alexk
• gniibe
m.eik
• werner

Description

Summary

DoS in CMS SignedData parsing: zero-progress signerInfos loop can cause unbounded CPU/memory use: malformed CMS SignedData can make signerInfos parsing report success without consuming input, leaving the parser in a zero-progress loop that repeatedly appends signer entries until CPU or memory is exhausted.

Reported by: Jakub Jelen (Red Hat)
Acknowledgement: Aisle Research

Revisions and Commits

rK libksba
rK06720f9b16a1 Fix CMS parser to avoid possible infinite loop.

Related Objects

Event Timeline

• gniibe created this task.Jul 21 2026, 8:16 AM
• gniibe mentioned this in Unknown Object (Maniphest Task).Mon, Jul 27, 8:16 AM
• gniibe claimed this task.Thu, Jul 30, 7:28 AM
• gniibe added a commit: rK06720f9b16a1: Fix CMS parser to avoid possible infinite loop..Thu, Jul 30, 8:42 AM
• gniibe changed the task status from Open to Testing.Mon, Aug 3, 6:49 AM
• gniibe lowered the priority of this task from Unbreak Now! to Normal.
• werner closed this task as Resolved.Mon, Aug 24, 2:47 PM
• werner mentioned this in T8253: Release LibKSBA 1.8.0.
• gniibe shifted this object from the Restricted Space space to the S1 Public space.Tue, Aug 25, 3:47 AM
• gniibe changed the visibility from "g10code (Project)" to "Public (No Login Required)".