PT-2022-5138 · Libksba +10 · Libksba +10

🗓️ 17 Oct 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Vulnerability in Libksba allows remote code execution via integer overflow in CRL parser.

Reporter	Title	Published	Views	Family All 365
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in GnuPG [CVE-2022-3515 and CVE-2022-34903]	30 Nov 202210:22	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in libksba package affects Data Replication on Cloud Pak for Data	7 Nov 202320:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Expat, SQlite, libxml2, Libksba, zlib and GnuTLS	30 Nov 202208:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue Manager container images are vulnerable to vulnerabilities from libksba and sqlite (CVE-2022-47629 and CVE-2022-35737)	17 Feb 202311:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	6 Jan 202321:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Libksba abitrary code execution vulnerability( CVE-2022-47629)	5 Jul 202322:08	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities fixed and shipped with IBM Security Verify Bridge (Docker version) (CVE-2022-2175, CVE-2022-2526, CVE-2022-40674, CVE-2022-3515)	7 Mar 202319:58	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm

Source	Link
dev	www.dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
osv	www.osv.dev/vulnerability/RLSA-2022:7090
security-tracker	www.security-tracker.debian.org/tracker/DLA-3153-1
osv	www.osv.dev/vulnerability/openSUSE-SU-2024:12418-1
errata	www.errata.almalinux.org/8/ALSA-2022-7089.html
ubuntu	www.ubuntu.com/security/notices/USN-5688-2
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0131SE47MD
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates
osv	www.osv.dev/vulnerability/MGASA-2022-0404

11 Jun 2025 00:00Current

8High risk

Vulners AI Score8

CVSS 3.19.8

EPSS0.0146

SSVC

libksba vulnerability integer overflow remote code execution crl parser s/mime issue