A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libksbaUpgrade libksba-devel | Oct 28, 2022 | Oct 24, 2022 |
| Alpine Linux | — | Upgrade libksba | Mar 26, 2024 | Jan 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libksba-debuginfoUpgrade libksba-develUpgrade libksba | Dec 7, 2022 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade libksba | Dec 10, 2022 | Oct 19, 2022 |
| Amazon_linux_2023 | — | Upgrade libksbaUpgrade libksba-develUpgrade libksba-debugsourceUpgrade libksba-debuginfo | Feb 17, 2025 | Oct 17, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 12, 2023 |
| Centos_linux | — | Upgrade libksbaUpgrade libksba-develUpgrade libksba-debuginfoUpgrade libksba-debugsource | Oct 25, 2022 | Oct 24, 2022 |
| Debian | — | Upgrade libksba | Oct 20, 2022 | Oct 20, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/libksba. | Oct 31, 2022 | Oct 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libksba | Mar 20, 2023 | Jan 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libksba | May 8, 2023 | Jan 12, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libksba | Mar 9, 2023 | Jan 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libksba | Dec 9, 2022 | Dec 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libksba | Mar 9, 2023 | Jan 12, 2023 |
| Oracle_linux | — | Upgrade libksbaUpgrade libksba-devel | Oct 25, 2022 | Oct 17, 2022 |
| Redhat_linux | — | Upgrade libksbaUpgrade libksba-debugsourceUpgrade libksba-develNo solution existsUpgrade libksba-debuginfo | Oct 25, 2022 | Oct 24, 2022 |
| Rocky_linux | — | Upgrade libksba-develUpgrade libksba-debuginfoUpgrade libksba-debugsourceUpgrade libksba | Mar 12, 2024 | Jan 12, 2023 |
| Suse | — | Upgrade libksba-develUpgrade libksba8 | Oct 26, 2022 | Oct 22, 2022 |
| Ubuntu | — | Upgrade libksba8 (Ubuntu Pro)Upgrade libksba8 | Oct 19, 2022 | Oct 19, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub