532 matches found
OESA-2022-2158 libksba security update
Libksba is a library to make the tasks of working with X.509 certificates,CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way. Security Fixes: Libksba before 1.6.3 is prone to an integer overflow...
OESA-2022-2157 libksba security update
Libksba is a library to make the tasks of working with X.509 certificates,CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way. Security Fixes: Libksba before 1.6.3 is prone to an integer overflow...
libksba: Remote Code Execution
Background Libksba is a X.509 and CMS PKCS7 library. Description An integer overflow in parsing ASN.1 objects could lead to a buffer overflow. Impact Crafted ASN.1 objects could trigger an integer overflow and buffer overflow to result in remote code execution. Workaround There is no known...
GLSA-202212-07 : libksba: Remote Code Execution
The remote host is affected by the vulnerability described in GLSA-202212-07 libksba: Remote Code Execution - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 - libksba: integer overflow may lead to remote code execution CVE-2022-3515...
ROS-20221227-01
Vulnerability of the library providing functions for X.509 LibKSBA certificates is related to the integer overflow in the CRL parser. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to an application, cause an integer overflow and execute...
Integer Overflow
libksba is vulnerable to Integer Overflow. A remote attacker is able to cause integer overflows in the CRL signature parser...
Debian: Security Advisory (DLA-3248-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3248-1] libksba security update
Debian LTS Advisory DLA-3248-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 24, 2022 https://wiki.debian.org/LTS Package : libksba Version : 1.3.5-2+deb10u2 CVE ID : CVE-2022-47629 An integer overflow flaw was discovered in the CRL signature parser in...
DLA-3248-1 libksba - security update
Bulletin has no description...
Debian dla-3248 : libksba-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3248 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3248-1 [email protected] https://www.debian.org/lts/security/...
Debian DSA-5305-1 : libksba - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5305 advisory. An integer overflow flaw was discovered in the CRL signature parser in libksba, an X.509 and CMS support library, which could result in denial of service or the execution ...
Debian: Security Advisory (DSA-5305-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 36 : libksba (2022-3ef41c3410)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3ef41c3410 advisory. New upstream release fixing CVE-2022-3515 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...
[SECURITY] [DSA 5305-1] libksba security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5305-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 21, 2022 https://www.debian.org/security/faq -...
Slackware: Security Advisory (SSA:2022-354-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-5305-1 libksba - security update
Bulletin has no description...
Fedora 35 : libksba (2022-7c13845b0d)
The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-7c13845b0d advisory. New upstream release fixing CVE-2022-3515 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...
Slackware Linux 14.2 / 15.0 / current libksba Vulnerability (SSA:2022-354-01)
The version of libksba installed on the remote host is prior to 1.6.3. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-354-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
