Lucene search
K

54 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux - уязвимость в libksba

Before version 1.6.3, Libksba was vulnerable to an integer overflow vulnerability in the CRL signature parser...

9.8CVSS7AI score0.0146EPSS
Exploits2References2
OSV
OSV
added 2026/04/06 1:14 p.m.6 views

JLSEC-2026-57

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser...

9.8CVSS6.8AI score0.0146EPSS
Exploits2References12
RedhatCVE
RedhatCVE
added 2026/01/09 9:10 a.m.2 views

CVE-2026-21496

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.8AI score0.00022EPSS
Exploits1References1
NVD
NVD
added 2026/01/07 6:15 p.m.3 views

CVE-2026-21496

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00022EPSS
Exploits1References5
CVE
CVE
added 2026/01/07 5:9 p.m.11 views

CVE-2026-21496

CVE-2026-21496 affects iccDEV prior to 2.3.1.2. The vulnerability is a NULL pointer dereference in the signature parser, which can trigger a crash. Red Hat, NVD, and other sources corroborate that this issue was patched in version 2.3.1.2. Relevant impact is listed as Availability High, with othe...

5.5CVSS6.5AI score0.00022EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/01/07 5:9 p.m.20 views

CVE-2026-21496 NULL Pointer Dereference in iccDEV Signature Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS0.00022EPSS
Exploits1References5
OSV
OSV
added 2026/01/07 5:9 p.m.3 views

CVE-2026-21496 NULL Pointer Dereference in iccDEV Signature Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.7AI score0.00022EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2026/01/07 5:9 p.m.4 views

CVE-2026-21496 NULL Pointer Dereference in iccDEV Signature Parser

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.5AI score0.00022EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/07 5:9 p.m.2 views

EUVD-2026-1409

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to NULL pointer dereference via the signature parser. This issue has been patched in version 2.3.1.2...

5.5CVSS6.3AI score0.00022EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.4 views

iccDEV 安全漏洞

iccDEV is an open source color configuration codebase from the International Color Consortium ICC. A security vulnerability exists in iccDEV versions prior to 2.3.1.2, which stems from a null pointer dereference in the signature parser...

5.5CVSS6.6AI score0.00022EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.3 views

PT-2026-2062

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.2 Description iccDEV is a set of libraries and tools used for interacting with, manipulating, and applying ICC color management profiles. A NULL pointer dereference issue exists in the signature parser in version...

5.5CVSS6.6AI score0.00022EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-50389

Malicious code in bioql PyPI...

9.8CVSS7.9AI score0.0146EPSS
Exploits2References22
Tenable Nessus
Tenable Nessus
added 2024/09/10 12:0 a.m.17 views

NewStart CGSL MAIN 6.02 : libksba Vulnerability (NS-SA-2024-0050)

The remote NewStart CGSL host, running version MAIN 6.02, has libksba packages installed that are affected by a vulnerability: - A vulnerability was found in the Libksba library, due to an integer overflow within the CRL's signature parser. This issue can be exploited remotely for code execution ...

9.8CVSS8.1AI score0.0146EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.13 views

openSUSE: Security Advisory for libksba (SUSE-SU-2023:0056-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.0146EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:0 a.m.31 views

CentOS 8 : libksba (CESA-2023:0625)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:0625 advisory. - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Note that Nessus has not tested for this issue...

9.8CVSS7.6AI score0.0146EPSS
Exploits2References2
OSV
OSV
added 2023/12/01 3:59 p.m.3 views

CLSA-2023-1701446356 libksba: Fix of 2 CVEs

CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...

9.8CVSS6.9AI score0.0146EPSS
Exploits3References1
CloudLinux
CloudLinux
added 2023/12/01 3:38 p.m.32 views

libksba: Fix of 2 CVEs

CVE-2022-3515: detect a possible overflow directly in the TLV parser - CVE-2022-47629: fix an integer overflow in the CRL signature parser...

9.8CVSS7.6AI score0.0146EPSS
Exploits3
Tenable Nessus
Tenable Nessus
added 2023/06/09 12:0 a.m.26 views

EulerOS 2.0 SP5 : libksba (EulerOS-SA-2023-2155)

According to the versions of the libksba package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Note that Tenable Network Securit...

9.8CVSS7.6AI score0.0146EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2023/06/09 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for libksba (EulerOS-SA-2023-2155)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.0146EPSS
Exploits2References2
Amazon
Amazon
added 2023/06/06 12:0 a.m.19 views

Important: libksba

Issue Overview: Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Affected Packages: libksba Issue Correction: Run yum update libksba or yum update --advisory ALAS-2023-1752 to update your system. New Packages: i686: ...

9.8CVSS8.4AI score0.0146EPSS
Exploits2
Rows per page
Query Builder