CVE-2022-3515

CVE-2022-3515 affects the Libksba library, caused by an integer overflow in the CRL parser. The vulnerability can be exploited remotely by sending specially crafted data (for example, a malicious S/MIME attachment) to achieve code execution on the target system. Several connected advisories note ...

CVE-2022-47629

The CVE-2022-47629 entry concerns the libksba library (before 1.6.3) with an integer overflow vulnerability in the CRL signature parser. Multiple connected advisories confirm the same issue and its fix: upgrading to libksba 1.6.3 or newer resolves the problem. Documented references from Linux dis...

CVE-2014-9087

CVE-2014-9087: Libksba’s ksba_oid_to_str() has an integer underflow pre-1.3.2, used by GnuPG, enabling a crafted OID in S/MIME or ECC OpenPGP data to trigger a crash (DoS) or potential overflow. Affected: Libksba/libksba_oid_to_str; Fix: upgrade to Libksba 1.3.2 or newer. No exploit details in pr...