CVE Vulnerability

CVE-2022-47629

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://dev.gnupg.org/T6284 Patch Third Party Advisory
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070 Patch Third Party Advisory
https://www.debian.org/security/2022/dsa-5305 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00035.html Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202212-07 Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:libksba_project:libksba:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Information

Published : 2022-12-20 11:15

Updated : 2023-01-03 02:59

NVD link : CVE-2022-47629

Mitre link : CVE-2022-47629

Products Affected
No products.
CWE
CWE-190