TI-2022-03243 CVE-2022-3515 · GHSA-58wq-p76f-6qjh
Integer overflow in libksba
Priority HIGH 82
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser.
GnuPG
Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high20CVSS 7.0–8.9
Exploited now
GnuPG records in CISA KEVNo GnuPG vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Libksba · all components
TI-2022-23657 CVE-2022-47629 · GHSA-j4m3-g4pc-cph8
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
Priority MEDIUM 45
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
TI-2014-07381 CVE-2014-9087 · GHSA-vqgr-f24j-7rxx
Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in…
Priority MEDIUM 41
Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP…
TI-2016-03944 CVE-2016-4579 · GHSA-rjw4-277h-vv44
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds…
Priority LOW 39
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
TI-2016-03738 CVE-2016-4356 · GHSA-mhm6-qhc6-f9f7
The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows…
Priority LOW 39
The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded d…
TI-2016-03939 CVE-2016-4574 · GHSA-986h-5j8j-hgfc
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba…
Priority LOW 38
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data.
TI-2016-03737 CVE-2016-4355 · GHSA-9fcx-ch52-32jj
Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote…
Priority LOW 37
Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.
TI-2016-03736 CVE-2016-4354 · GHSA-35f2-fx5v-8568
ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows…
Priority LOW 37
ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.
TI-2016-03735 CVE-2016-4353 · GHSA-qcgh-wvgp-7qgv
ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows…
Priority LOW 37
ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service (abort) via crafted BER data.