critical9.8
CVE-2022-47629
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
Impact
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnupg | Libksba | before 1.6.3 |
| Debian | Debian Linux | Versions 10.0, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://dev.gnupg.org/T6284
- https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
- https://lists.debian.org/debian-lts-announce/2022/12/msg00035.html
- https://security.gentoo.org/glsa/202212-07
- https://security.netapp.com/advisory/ntap-20230316-0011/
- https://www.debian.org/security/2022/dsa-5305
- https://dev.gnupg.org/T6284
- https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
- https://lists.debian.org/debian-lts-announce/2022/12/msg00035.html
- https://security.gentoo.org/glsa/202212-07
- https://security.netapp.com/advisory/ntap-20230316-0011/
- https://www.debian.org/security/2022/dsa-5305