Lucene search
AlmaLinuxALSA-2023:0626HistoryFeb 07, 2023 - 12:00 a.m.
Important: libksba security update
2023-02-0700:00:00
errata.almalinux.org
11
ksba
x.509 certificates
cms
s/mime
tls
security update
integer overflow
code execution
cve-2022-47629
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.8%
KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.
Security Fix(es):
- libksba: integer overflow to code executiona (CVE-2022-47629)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | i686 | libksba | < 1.5.1-6.el9_1 | libksba-1.5.1-6.el9_1.i686.rpm |
| almalinux | 9 | x86_64 | libksba | < 1.5.1-6.el9_1 | libksba-1.5.1-6.el9_1.x86_64.rpm |
| almalinux | 9 | aarch64 | libksba | < 1.5.1-6.el9_1 | libksba-1.5.1-6.el9_1.aarch64.rpm |
| almalinux | 9 | ppc64le | libksba | < 1.5.1-6.el9_1 | libksba-1.5.1-6.el9_1.ppc64le.rpm |
| almalinux | 9 | s390x | libksba | < 1.5.1-6.el9_1 | libksba-1.5.1-6.el9_1.s390x.rpm |
| almalinux | 9 | i686 | libksba-devel | < 1.5.1-6.el9_1 | libksba-devel-1.5.1-6.el9_1.i686.rpm |
| almalinux | 9 | x86_64 | libksba-devel | < 1.5.1-6.el9_1 | libksba-devel-1.5.1-6.el9_1.x86_64.rpm |
| almalinux | 9 | aarch64 | libksba-devel | < 1.5.1-6.el9_1 | libksba-devel-1.5.1-6.el9_1.aarch64.rpm |
| almalinux | 9 | ppc64le | libksba-devel | < 1.5.1-6.el9_1 | libksba-devel-1.5.1-6.el9_1.ppc64le.rpm |
| almalinux | 9 | s390x | libksba-devel | < 1.5.1-6.el9_1 | libksba-devel-1.5.1-6.el9_1.s390x.rpm |
Related
cbl_mariner
cbl_mariner
CVE-2022-47629 affecting package libksba for versions less than 1.6.3-1
2023-01-17 16:46:45
CVE-2022-47629 affecting package libksba 1.3.5-3
2023-01-12 20:54:53
nessus
nessus
RHEL 9 : libksba (RHSA-2023:0626)
2023-02-07 00:00:00
Ubuntu 16.04 ESM : Libksba vulnerability (USN-5787-2)
2023-01-09 00:00:00
SUSE SLES12 Security Update : libksba (SUSE-SU-2023:0031-2)
2023-02-14 00:00:00
oraclelinux
oraclelinux
libksba security update
2023-02-08 00:00:00
libksba security update
2023-02-07 00:00:00
libksba security update
2023-01-30 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libksba (EulerOS-SA-2023-2155)
2023-06-09 00:00:00
Debian: Security Advisory (DLA-3248-1)
2022-12-25 00:00:00
openSUSE: Security Advisory for libksba (SUSE-SU-2023:0056-1)
2024-03-04 00:00:00
nvd
nvd
CVE-2022-47629
2022-12-20 23:15:12
ibm
ibm
ubuntucve
ubuntucve
CVE-2022-47629
2022-12-20 00:00:00
ubuntu
ubuntu
Libksba vulnerability
2023-01-09 00:00:00
Libksba vulnerability
2023-01-05 00:00:00
redhat
redhat
(RHSA-2023:0594) Important: libksba security update
2023-02-06 16:19:16
(RHSA-2023:0624) Important: libksba security update
2023-02-07 15:21:57
(RHSA-2023:0626) Important: libksba security update
2023-02-07 15:24:12
osv
osv
Important: libksba security update
2023-02-07 00:00:00
CVE-2022-47629
2022-12-20 23:15:12
libksba - security update
2022-12-21 00:00:00
centos
centos
libksba security update
2023-02-20 16:15:30
amazon
amazon
Important: libksba
2023-05-11 17:49:00
Important: libksba
2023-05-25 17:41:00
debian
debian
[SECURITY] [DLA 3248-1] libksba security update
2022-12-24 15:26:43
[SECURITY] [DSA 5305-1] libksba security update
2022-12-21 21:42:59
debiancve
debiancve
CVE-2022-47629
2022-12-20 23:15:12
rocky
rocky
libksba security update
2023-02-16 06:35:04
libksba security update
2023-02-16 06:35:52
photon
photon
Critical Photon OS Security Update - PHSA-2023-0511
2023-01-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-0309
2023-01-06 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0511
2023-01-06 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2129
2023-03-07 10:01:35
Advisory ROSA-SA-2023-2170
2023-06-20 10:21:17
Advisory ROSA-SA-2023-2193
2023-07-18 11:25:52
alpinelinux
alpinelinux
CVE-2022-47629
2022-12-20 23:15:12
veracode
veracode
Integer Overflow
2022-12-26 05:43:35
redos
redos
ROS-20221227-01
2022-12-27 00:00:00
almalinux
almalinux
Important: libksba security update
2023-02-07 00:00:00
prion
prion
Integer overflow
2022-12-20 23:15:00
redhatcve
redhatcve
CVE-2022-47629
2023-01-17 10:34:55
cve
cve
CVE-2022-47629
2022-12-20 23:15:12
cvelist
cvelist
CVE-2022-47629
2022-12-20 00:00:00
mageia
mageia
Updated libksba packages fix security vulnerability
2022-12-31 01:39:00
gentoo
gentoo
libksba: Remote Code Execution
2022-12-28 00:00:00
cloudlinux
cloudlinux
libksba: Fix of 2 CVEs
2023-12-01 15:38:16
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.8%
Related for ALSA-2023:0626