CVE-2022-3515

🗓️ 12 Jan 2023 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1030 Views

A vulnerability in Libksba library allows remote code execution via crafted data

Reporter	Title	Published	Views	Family All 201
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in GnuPG [CVE-2022-3515 and CVE-2022-34903]	30 Nov 202210:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Expat, SQlite, libxml2, Libksba, zlib and GnuTLS	30 Nov 202208:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	6 Jan 202321:23	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities fixed and shipped with IBM Security Verify Bridge (Docker version) (CVE-2022-2175, CVE-2022-2526, CVE-2022-40674, CVE-2022-3515)	7 Mar 202319:58	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in base image packages affect IBM Voice Gateway	15 Dec 202217:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	30 Jan 202313:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed	3 Mar 202514:36	–	ibm

NVD

Vulners

Node

gnupg libksbaRange<1.6.3

Node

gpg4win gpg4winRange2.0.0–4.1.0

Node

gnupg vs-desktopRange3.1.16–3.1.26

Node

gnupg gnupgRange2.1.0–2.2.41lts

gnupg gnupgRange2.3.0–2.4.0-

[
  {
    "vendor": "n/a",
    "product": "libksba",
    "versions": [
      {
        "version": "Fixed in libksba v1.6.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gnupg	www.gnupg.org/blog/20221017-pepe-left-the-ksba.html
security	www.security.netapp.com/advisory/ntap-20230706-0008/
access	www.access.redhat.com/security/cve/CVE-2022-3515
dev	www.dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

08 Apr 2025 16:15Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.00164

SSVC

CWE-190