Lucene search
+L

780 matches found

Cvelist
Cvelist
added 2023/01/12 12:0 a.m.39 views

CVE-2022-3515

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment...

9.9AI score0.01635EPSS
SaveExploits1References5
CVE
CVE
added 2023/01/12 12:0 a.m.1063 views

CVE-2022-3515

CVE-2022-3515 affects the Libksba library, caused by an integer overflow in the CRL parser. The vulnerability can be exploited remotely by sending specially crafted data (for example, a malicious S/MIME attachment) to achieve code execution on the target system. Several connected advisories note ...

9.8CVSS9.6AI score0.01635EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2023/01/12 12:0 a.m.91 views

CVE-2022-3515

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment...

9.8CVSS6.4AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2023/01/12 12:0 a.m.5 views

CVE-2022-3515

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment...

7.8AI score0.01635EPSS
SaveExploits1References5
Ubuntu
Ubuntu
added 2023/01/09 11:24 a.m.83 views

USN-5787-2: Libksba vulnerability

USN-5787-1 fixed vulnerabilities in Libksba. This update provides the corresponding updates for Ubuntu 16.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker could use this issue to cause Libksba to...

9.8CVSS8AI score0.0155EPSS
SaveExploits2
OSV
OSV
added 2023/01/09 11:24 a.m.9 views

USN-5787-2 libksba vulnerability

USN-5787-1 fixed vulnerabilities in Libksba. This update provides the corresponding updates for Ubuntu 16.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker could use this issue to cause Libksba to...

9.8CVSS7.1AI score0.0155EPSS
SaveExploits2References2
OSV
OSV
added 2023/01/09 10:13 a.m.6 views

SUSE-SU-2023:0056-1 Security update for libksba

This update for libksba fixes the following issues: - CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL signature parser bsc1206579...

9.8CVSS9.6AI score0.0155EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2023/01/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2023:0056-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.0155EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2023/01/07 12:0 a.m.20 views

Slackware Linux 15.0 / current mozilla-nss Vulnerability (SSA:2023-006-01)

The version of mozilla-nss installed on the remote host is prior to 3.87. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-006-01 advisory. - NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded D...

9.8CVSS7.3AI score0.17563EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2023/01/05 12:43 p.m.80 views

USN-5787-1: Libksba vulnerability

It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code...

9.8CVSS8AI score0.0155EPSS
SaveExploits2
OSV
OSV
added 2023/01/05 12:43 p.m.6 views

USN-5787-1 libksba vulnerability

It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code...

9.8CVSS7.1AI score0.0155EPSS
SaveExploits2References2
OSV
OSV
added 2023/01/05 12:34 p.m.8 views

SUSE-SU-2023:0031-1 Security update for libksba

This update for libksba fixes the following issues: - CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL signature parser bsc1206579...

9.8CVSS9.6AI score0.0155EPSS
SaveExploits2References3
OSV
OSV
added 2022/12/30 10:39 p.m.12 views

MGASA-2022-0485 Updated libksba packages fix security vulnerability

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629...

9.8CVSS9.5AI score0.0155EPSS
SaveExploits2References4
Mageia
Mageia
added 2022/12/30 10:39 p.m.34 views

Updated libksba packages fix security vulnerability

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629...

9.8CVSS4.8AI score0.0155EPSS
SaveExploits2References3
OSV
OSV
added 2022/12/30 11:5 a.m.8 views

OESA-2022-2158 libksba security update

Libksba is a library to make the tasks of working with X.509 certificates,CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way. Security Fixes: Libksba before 1.6.3 is prone to an integer overflow...

5.5CVSS7.2AI score0.0155EPSS
SaveExploits2References2
OSV
OSV
added 2022/12/30 11:5 a.m.5 views

OESA-2022-2157 libksba security update

Libksba is a library to make the tasks of working with X.509 certificates,CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way. Security Fixes: Libksba before 1.6.3 is prone to an integer overflow...

5.5CVSS7.2AI score0.0155EPSS
SaveExploits2References2
OSV
OSV
added 2022/12/30 11:5 a.m.8 views

OESA-2022-2159 libksba security update

Libksba is a library to make the tasks of working with X.509 certificates,CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way. Security Fixes: Libksba before 1.6.3 is prone to an integer overflow...

5.5CVSS7.2AI score0.0155EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2022/12/28 12:0 a.m.9 views

The vulnerability of the library function for working with X.509 certificates, LibKSBA, is related to a numerical overflow in the syntax analyzer CRL. This allows an attacker to execute any code in the target system.

The vulnerability of the library’s certificate handling function for X.509 certificates is related to a numerical overflow in the CRL syntax analyzer. Exploiting this vulnerability allows an attacker to send specially crafted data to the application, trigger a numerical overflow, and execute...

8.1CVSS7.6AI score0.0155EPSS
SaveExploits2References14Affected Software9
Redos
Redos
added 2022/12/27 12:0 a.m.21 views

ROS-20221227-01

Vulnerability of the library providing functions for X.509 LibKSBA certificates is related to the integer overflow in the CRL parser. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow and execute...

9.8CVSS9.8AI score0.0155EPSS
SaveExploits2
Veracode
Veracode
added 2022/12/26 5:43 a.m.28 views

Integer Overflow

libksba is vulnerable to Integer Overflow. A remote attacker is able to cause integer overflows in the CRL signature parser...

9.8CVSS9AI score0.0155EPSS
SaveExploits2References12Affected Software1
Rows per page
Query Builder