CVE-2022-47629

Name
CVE-2022-47629
Description
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://dev.gnupg.org/T6284
MISC https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git;a=commit;h=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
DEBIAN https://www.debian.org/security/2022/dsa-5305
MLIST https://lists.debian.org/debian-lts-announce/2022/12/msg00035.html
GENTOO https://security.gentoo.org/glsa/202212-07
CONFIRM https://security.netapp.com/advisory/ntap-20230316-0011/
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:gnupg:libksba:*:*:*:*:*:*:*:* libksba >= None < 1.6.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
libksba edge-main 1.6.3-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
libksba edge-main 1.6.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
libksba 3.22-main 1.6.3-r0 None fixed
libksba 3.22-main 1.6.2-r0 None possibly vulnerable
libksba 3.21-main 1.6.3-r0 None fixed
libksba 3.21-main 1.6.2-r0 None possibly vulnerable
libksba 3.20-main 1.6.3-r0 None fixed
libksba 3.20-main 1.6.2-r0 None possibly vulnerable
libksba 3.19-main 1.6.3-r0 None fixed
libksba 3.19-main 1.6.2-r0 None possibly vulnerable
libksba 3.18-main 1.6.3-r0 None fixed
libksba 3.17-main 1.6.3-r0 Natanael Copa <ncopa@alpinelinux.org> fixed