CVE-2022-47629

Опубликовано: 20 дек. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Ссылки

https://dev.gnupg.org/T6284
Patch
Third Party Advisory
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
https://lists.debian.org/debian-lts-announce/2022/12/msg00035.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202212-07
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230316-0011/
https://www.debian.org/security/2022/dsa-5305
Third Party Advisory
https://dev.gnupg.org/T6284
Patch
Third Party Advisory
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
https://lists.debian.org/debian-lts-announce/2022/12/msg00035.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202212-07
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230316-0011/
https://www.debian.org/security/2022/dsa-5305
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnupg:libksba:*:*:*:*:*:*:*:*

Версия до 1.6.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01843

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2022-47629

CVSS3: 9.8

ubuntu

больше 2 лет назад

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

CVE-2022-47629

CVSS3: 8.6

redhat

почти 3 года назад

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

CVE-2022-47629

CVSS3: 9.8

msrc

больше 2 лет назад

Описание отсутствует

CVE-2022-47629

CVSS3: 9.8

debian

больше 2 лет назад

Libksba before 1.6.3 is prone to an integer overflow vulnerability in ...

SUSE-SU-2023:0056-2

suse-cvrf

больше 2 лет назад

Security update for libksba

EPSS

Процентиль: 82%

0.01843

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190