Lucene search
GoogleOSV:ALSA-2022:7090HistoryOct 24, 2022 - 12:00 a.m.
Important: libksba security update
2022-10-2400:00:00
Google
osv.dev
11
libksba
x.509 certificates
cms
s/mime
tls
integer overflow
remote code execution
cve-2022-3515
security update
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.017
Percentile
88.0%
KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS.
Security Fix(es):
- libksba: integer overflow may lead to remote code execution (CVE-2022-3515)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
redhat
redhat
(RHSA-2022:7088) Important: libksba security update
2022-10-24 13:16:47
(RHSA-2022:7089) Important: libksba security update
2022-10-24 13:32:30
(RHSA-2022:7927) Important: libksba security update
2022-11-14 08:45:21
nessus
nessus
RHEL 7 : libksba (RHSA-2022:7088)
2022-10-24 00:00:00
AlmaLinux 8 : libksba (ALSA-2022:7089)
2022-10-25 00:00:00
Oracle Linux 8 : libksba (ELSA-2022-7089)
2022-10-25 00:00:00
gentoo
gentoo
libksba: Remote Code Execution
2022-10-31 00:00:00
libksba: Remote Code Execution
2022-12-28 00:00:00
mageia
mageia
Updated libksba packages fix security vulnerability
2022-11-02 01:58:59
cbl_mariner
cbl_mariner
CVE-2022-3515 affecting package libksba 1.3.5-4
2023-03-02 04:18:32
CVE-2022-3515 affecting package gnupg2 2.2.20-4
2024-09-06 15:16:08
CVE-2022-3515 affecting package gnupg2 for versions less than 2.4.0-1
2023-03-24 23:41:07
openvas
openvas
Huawei EulerOS: Security Advisory for libksba (EulerOS-SA-2023-1508)
2023-03-09 00:00:00
Fedora: Security Advisory for libksba (FEDORA-2022-7c13845b0d)
2022-11-02 00:00:00
Debian: Security Advisory (DSA-5255-1)
2022-10-19 00:00:00
osv
osv
CGA-p93g-6cq2-hvpj
2024-06-06 12:28:42
Important: libksba security update
2022-10-24 13:36:33
Important: libksba security update
2022-10-24 13:32:30
cve
cve
CVE-2022-3515
2023-01-12 15:15:10
zdi
zdi
nvd
nvd
CVE-2022-3515
2023-01-12 15:15:10
redos
redos
ROS-20221020-01
2022-10-20 00:00:00
amazon
amazon
Important: libksba
2022-12-01 20:31:00
Important: libksba
2022-12-01 17:34:00
rocky
rocky
libksba security update
2022-10-24 13:36:33
libksba security update
2022-10-24 13:32:30
prion
prion
Integer overflow
2023-01-12 15:15:00
oraclelinux
oraclelinux
libksba security update
2022-10-24 00:00:00
libksba security update
2022-10-24 00:00:00
libksba security update
2022-10-24 00:00:00
ubuntu
ubuntu
Libksba vulnerability
2022-10-26 00:00:00
Libksba vulnerability
2022-10-19 00:00:00
centos
centos
libksba security update
2022-10-26 14:16:27
fedora
fedora
[SECURITY] Fedora 36 Update: libksba-1.6.2-1.fc36
2022-10-25 13:13:26
[SECURITY] Fedora 35 Update: libksba-1.6.2-1.fc35
2022-11-01 15:56:40
[SECURITY] Fedora 37 Update: libksba-1.6.2-1.fc37
2022-11-02 02:01:28
debiancve
debiancve
CVE-2022-3515
2023-01-12 15:15:10
debian
debian
[SECURITY] [DLA 3153-1] libksba security update
2022-10-17 21:21:47
[SECURITY] [DSA 5255-1] libksba security update
2022-10-17 20:13:16
almalinux
almalinux
Important: libksba security update
2022-10-24 00:00:00
Important: libksba security update
2022-10-24 00:00:00
veracode
veracode
Stack-based Buffer Overflow
2022-10-21 00:42:05
alpinelinux
alpinelinux
CVE-2022-3515
2023-01-12 15:15:10
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to arbitrary code execution in GnuPG Libksba [CVE-2022-3515]
2023-04-06 19:21:25
cvelist
cvelist
CVE-2022-3515
2023-01-12 00:00:00
redhatcve
redhatcve
CVE-2022-3515
2022-10-18 06:10:02
ubuntucve
ubuntucve
CVE-2022-3515
2022-10-17 00:00:00
suse
suse
Security update for libksba (critical)
2022-10-21 00:00:00
cloudlinux
cloudlinux
libksba: Fix of 2 CVEs
2023-12-01 15:38:16
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0319
2023-01-23 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0323
2023-01-30 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0519
2023-01-23 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2170
2023-06-20 10:21:17
Advisory ROSA-SA-2023-2193
2023-07-18 11:25:52
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.017
Percentile
88.0%
Related for OSV:ALSA-2022:7090