A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libksbaalma-upgrade-libksba-devel | Oct 28, 2022 | Oct 24, 2022 | |
| Alpine Linux | alpine-linux-upgrade-libksba | Mar 26, 2024 | Jan 12, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libksbaamazon-linux-ami-2-upgrade-libksba-debuginfoamazon-linux-ami-2-upgrade-libksba-devel | Dec 7, 2022 | Dec 7, 2022 | |
| Amazon_linux | — | amazon-linux-upgrade-libksba | Dec 10, 2022 | Oct 19, 2022 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libksbaamazon-linux-2023-upgrade-libksba-debuginfoamazon-linux-2023-upgrade-libksba-debugsourceamazon-linux-2023-upgrade-libksba-devel | Feb 17, 2025 | Oct 17, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 12, 2023 | |
| Centos_linux | — | centos-upgrade-libksbacentos-upgrade-libksba-debuginfocentos-upgrade-libksba-debugsourcecentos-upgrade-libksba-devel | Oct 25, 2022 | Oct 24, 2022 |
| Debian | debian-upgrade-libksba | Oct 20, 2022 | Oct 20, 2022 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-libksba | Oct 31, 2022 | Oct 31, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libksba | Mar 20, 2023 | Jan 12, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libksba | May 8, 2023 | Jan 12, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libksba | Mar 9, 2023 | Jan 12, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-libksba | Dec 9, 2022 | Dec 8, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-libksba | Mar 9, 2023 | Jan 12, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-libksbaoracle-linux-upgrade-libksba-devel | Oct 25, 2022 | Oct 17, 2022 |
| Redhat_linux | redhat-upgrade-libksbaredhat-upgrade-libksba-debuginforedhat-upgrade-libksba-debugsourceredhat-upgrade-libksba-devel | Oct 25, 2022 | Oct 24, 2022 | |
| Rocky_linux | rocky-upgrade-libksbarocky-upgrade-libksba-debuginforocky-upgrade-libksba-debugsourcerocky-upgrade-libksba-devel | Mar 12, 2024 | Jan 12, 2023 | |
| Suse | — | suse-upgrade-libksba-develsuse-upgrade-libksba8 | Oct 26, 2022 | Oct 22, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libksba8ubuntu-upgrade-libksba8 | Oct 19, 2022 | Oct 19, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub