{"id":"CVE-2022-3515","aliases":["ALPINE-CVE-2022-3515","ALSA-2022:7089","ALSA-2022:7090","AZL-13005","BELL-CVE-2022-3515","CLSA-2023-1701445092","CLSA-2023-1701445345","CLSA-2023-1701445586","CLSA-2023-1701446356","CLSA-2023-1701446494","DEBIAN-CVE-2022-3515","DLA-3153-1","DSA-5255-1","EUVD-2022-42884","GHSA-58wq-p76f-6qjh","JLSEC-2025-93","MGASA-2022-0404","OESA-2022-2021","RHSA-2022:7088","RHSA-2022:7089","RHSA-2022:7090","RHSA-2022:7209","RHSA-2022:7283","RHSA-2022:7927","RHSA-2022:8598","RLSA-2022:7089","RLSA-2022:7090","SUSE-SU-2022:3681-1","SUSE-SU-2022:3683-1","UBUNTU-CVE-2022-3515","USN-5688-1","openSUSE-SU-2024:12418-1"],"status":"published","title":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser...","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01703,"percentile":0.77447,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2022-10-17T00:00:00Z","modified":"2026-11-03T07:18:33Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"libksba","fixed_in":["1.5.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libksba","fixed_in":["1.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libksba","fixed_in":["1.6.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libksba","fixed_in":["1.6.2-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libksba","fixed_in":["1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libksba-devel","fixed_in":["1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libksba","fixed_in":["1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libksba-devel","fixed_in":["1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"gnupg2","fixed_in":["2.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libksba","fixed_in":["1.6.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libksba","fixed_in":["1.6.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libksba","fixed_in":["1.6.2-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"libksba","fixed_in":["1.3.5-2+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"libksba","fixed_in":["1.5.0-3+deb11u1"],"sources":["osv"]},{"ecosystem":"Julia","package":"GnuPG_jll","fixed_in":["2.4.7+0"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libksba_jll","fixed_in":["1.6.7+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libksba","fixed_in":["1.5.0-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libksba","fixed_in":["1.4.0-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libksba","fixed_in":["1.4.0-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libksba","fixed_in":["1.6.0-2.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libksba","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libksba-debuginfo","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libksba-devel","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libksba","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libksba-debuginfo","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libksba-devel","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libksba","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libksba-debuginfo","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libksba-devel","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libksba","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libksba-debuginfo","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libksba-devel","fixed_in":["0:1.3.0-6.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libksba","fixed_in":["0:1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libksba-devel","fixed_in":["0:1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libksba","fixed_in":["0:1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libksba-debuginfo","fixed_in":["0:1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libksba-debugsource","fixed_in":["0:1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libksba-debuginfo","fixed_in":["0:1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libksba-debugsource","fixed_in":["0:1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libksba-devel","fixed_in":["0:1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"libksba","fixed_in":["0:1.3.5-8.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libksba","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"libksba","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"libksba","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"libksba","fixed_in":["0:1.3.5-8.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"libksba-debuginfo","fixed_in":["0:1.3.5-8.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"libksba-debugsource","fixed_in":["0:1.3.5-8.el8_4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"libksba-devel","fixed_in":["0:1.3.5-8.el8_4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libksba","fixed_in":["0:1.3.5-8.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libksba","fixed_in":["0:1.5.1-5.el9_0"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libksba","fixed_in":["1.3.0-24.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libksba","fixed_in":["1.3.5-150000.4.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libksba","fixed_in":["1.3.0-3ubuntu0.14.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libksba","fixed_in":["1.3.3-1ubuntu0.16.04.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libksba","fixed_in":["1.3.5-2ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libksba","fixed_in":["1.3.5-2ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libksba","fixed_in":["1.6.0-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libksba","fixed_in":["1.6.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"gnupg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-4.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-4.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-7.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-7.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-7.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-7.el8.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-4.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.7-4.el6.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libksba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1ubuntu0.16.04.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libksba8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1ubuntu0.16.04.1+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2+deb10u1"}]}],"versions":["1.3.5-2"]},{"source":"osv","ecosystem":"Debian:11","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-3+deb11u1"}]}],"versions":["1.5.0-3"]},{"source":"osv","ecosystem":"Julia","package":"GnuPG_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.7+0"}]}]},{"source":"osv","ecosystem":"Julia","package":"Libksba_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.6.7+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-2.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-6.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"libksba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"libksba-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::crb","package":"libksba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-202211170828_8.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-202211170828_8.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-8.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-5.el9_0"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-24.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-150000.4.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3ubuntu0.14.04.2+esm1"}]}],"versions":["1.3.0-2","1.3.0-2ubuntu1","1.3.0-3","1.3.0-3ubuntu0.14.04.1","1.3.0-3ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1ubuntu0.16.04.1+esm1"}]}],"versions":["1.3.3-1","1.3.3-1ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2ubuntu0.18.04.1"}]}],"versions":["1.3.5-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2ubuntu0.20.04.1"}]}],"versions":["1.3.5-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-2ubuntu0.1"}]}],"versions":["1.5.1-1","1.5.1-1build1","1.6.0-2","1.6.0-2build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-3ubuntu0.14.04.2+esm1"}]}],"versions":["1.3.0-2","1.3.0-2ubuntu1","1.3.0-3","1.3.0-3ubuntu0.14.04.1","1.3.0-3ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.3-1ubuntu0.16.04.1+esm1"}]}],"versions":["1.3.3-1","1.3.3-1ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2ubuntu0.18.04.1"}]}],"versions":["1.3.5-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2ubuntu0.20.04.1"}]}],"versions":["1.3.5-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-2ubuntu0.1"}]}],"versions":["1.5.1-1","1.5.1-1build1","1.6.0-2","1.6.0-2build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libksba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-1.1"}]}]}],"products":[{"vendor":"gnupg","product":"gnupg"},{"vendor":"gnupg","product":"libksba"},{"vendor":"gnupg","product":"vs-desktop"},{"vendor":"gpg4win","product":"gpg4win"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135610","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html","tags":["x_transferred","Third Party Advisory","article","web"]},{"url":"https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b","tags":["x_transferred","Exploit","Patch","Third Party Advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3515","tags":["x_transferred","Patch","Third Party Advisory","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230706-0008/","tags":["x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3515","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230706-0008"},{"url":"https://github.com/advisories/GHSA-58wq-p76f-6qjh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-3515","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7089","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2135610","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7089.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7090","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-7090.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-3515","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1701445092.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1701445345.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1701445586.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1701446356.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1701446494","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3515.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3515","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0404.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30975","tags":["report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2021","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7088","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7088.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3515","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7089.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7090.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7209","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7209.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7283","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7283.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7927","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7927.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8598","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133988","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8598.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38177","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38177","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2022-38177","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38178","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38178","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2022-38178","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40674","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40674","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40674","tags":["advisory"]},{"url":"https://blog.hartwork.org/posts/expat-2-4-9-released/","tags":["article"]},{"url":"https://github.com/advisories/GHSA-2vq2-xc55-3j5m","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41974","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41974","tags":["advisory"]},{"url":"https://www.qualys.com/2022/10/24/leeloo-multipath/leeloo-multipath.txt","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7089","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7090","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223681-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204357","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3515","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223683-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-3515","tags":["report"]},{"url":"https://gnupg.org/blog/20221017-pepe-left-the-ksba.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5688-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5688-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-3515","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2025-04-08T15:48:31.667Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-190","CWE-190"],"updated_at":"2026-11-02T14:34:33.574107Z"}],"euvd":[{"id":"EUVD-2022-42884","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2025-04-08T15:48:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:39.54776Z"}],"ghsa":[{"id":"GHSA-58wq-p76f-6qjh","title":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser...","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T15:30:24Z","modified":"2025-04-08T18:35:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:00:51.712066Z"}],"nvd":[{"id":"CVE-2022-3515","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T15:15:10.187Z","modified":"2026-06-17T04:59:40.283Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:35.157734Z"}],"osv":[{"id":"ALPINE-CVE-2022-3515","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T15:15:10.187Z","modified":"2026-11-03T07:18:33.486066907Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-13005","title":"CVE-2022-3515 affecting package gnupg2 for versions less than 2.4.0-1","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T15:15:10Z","modified":"2026-04-21T04:22:31.747183Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"BELL-CVE-2022-3515","title":"CVE-2022-3515 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:21.101804Z","modified":"2026-01-26T09:46:12.005646Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-3515","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2026-10-28T02:30:29.907581964Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:26.195407Z"},{"id":"JLSEC-2025-93","title":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2025-10-17T22:31:47.919Z","modified":"2026-07-18T00:01:26.298812297Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-2021","title":"libksba security update","description":"Libksba is a library to make the tasks of working with X.509 certificates,CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way.\r\n\r\nSecurity Fix(es):\r\n\r\nA bug found in libksba, the library used by GnuPG for parsing the ASN.1 structures as used by S/MIME. The bug affects all versions of Libksba before 1.6.2 and may be used for remote code execution. \r\n\r\nhttps://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html\nhttps://dev.gnupg.org/T6230\nhttps://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b\nhttps://lwn.net/Articles/911467/(CVE-2022-3515)","status":"published","published":"2022-10-28T11:05:20Z","modified":"2026-08-18T01:17:20.070656018Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2022:7088","title":"Red Hat Security Advisory: libksba security update","status":"published","published":"2024-09-16T09:06:46Z","modified":"2026-06-26T11:01:01Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7089","title":"Red Hat Security Advisory: libksba security update","status":"published","published":"2024-09-16T09:07:00Z","modified":"2026-06-26T12:22:29.639316859Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7090","title":"Red Hat Security Advisory: libksba security update","status":"published","published":"2024-09-16T09:06:53Z","modified":"2026-06-26T12:22:18.493448348Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7209","title":"Red Hat Security Advisory: libksba security update","status":"published","published":"2024-09-16T09:06:40Z","modified":"2025-12-27T10:36:33.804374Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7283","title":"Red Hat Security Advisory: libksba security update","status":"published","published":"2024-09-16T09:06:55Z","modified":"2025-12-27T10:36:34.425518Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7927","title":"Red Hat Security Advisory: libksba security update","status":"published","published":"2024-09-16T09:07:03Z","modified":"2026-06-26T12:22:29.647974029Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8598","title":"Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.5.3-1]","status":"published","published":"2024-09-16T09:07:10Z","modified":"2026-10-09T10:05:22Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7089","title":"Important: libksba security update","description":"KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.\n\nSecurity Fix(es):\n\n* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-24T13:32:30Z","modified":"2026-02-04T11:00:06.827268Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:7090","title":"Important: libksba security update","description":"KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.\n\nSecurity Fix(es):\n\n* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-24T13:36:33Z","modified":"2026-02-05T08:30:09.632098Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-3515","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2022-10-17T00:00:00Z","modified":"2026-04-22T13:25:27.250029Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2022:7089","title":"Important: libksba security update","description":"KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.\n\nSecurity Fix(es):\n\n* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-24T00:00:00Z","modified":"2026-10-29T11:00:49.493220003Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:7090","title":"Important: libksba security update","description":"KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by other applications.  Both specifications are building blocks of S/MIME and TLS.\n\nSecurity Fix(es):\n\n* libksba: integer overflow may lead to remote code execution (CVE-2022-3515)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-24T00:00:00Z","modified":"2026-10-29T11:31:16.086789343Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2023-1701445092","title":"libksba: Fix of 2 CVEs","description":"- CVE-2022-3515: detect a possible overflow directly in the TLV parser\n- CVE-2022-47629: fix an integer overflow in the CRL signature parser","status":"published","published":"2023-12-01T15:38:16Z","modified":"2026-06-01T00:32:44.211290087Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1701445345","title":"libksba: Fix of 2 CVEs","description":"- CVE-2022-3515: detect a possible overflow directly in the TLV parser\n- CVE-2022-47629: fix an integer overflow in the CRL signature parser","status":"published","published":"2023-12-01T15:42:29Z","modified":"2026-06-01T00:32:26.640320737Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1701445586","title":"libksba: Fix of 2 CVEs","description":"- CVE-2022-3515: detect a possible overflow directly in the TLV parser\n- CVE-2022-47629: fix an integer overflow in the CRL signature parser","status":"published","published":"2023-12-01T15:46:30Z","modified":"2026-06-01T00:33:22.136669078Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1701446356","title":"libksba: Fix of 2 CVEs","description":"- CVE-2022-3515: detect a possible overflow directly in the TLV parser\n- CVE-2022-47629: fix an integer overflow in the CRL signature parser","status":"published","published":"2023-12-01T15:59:20Z","modified":"2026-06-01T00:33:25.03871477Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1701446494","title":"Fix CVE(s): CVE-2022-3515, CVE-2022-47629","description":"\n   * SECURITY UPDATE: integer overflow in the TLV parser\n     - debian/patches/CVE-2022-3515.patch: detect a possible overflow directly\n       in the TLV parser\n     - CVE-2022-3515\n   * SECURITY UPDATE: integer overflow in the CRL signature parser\n     - debian/patches/CVE-2022-47629.patch: fix an integer overflow in the CRL\n       signature parser\n     - CVE-2022-47629\n   * Enable internal tests","status":"published","published":"2023-12-01T16:01:37Z","modified":"2026-06-04T10:04:01.990277Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"DEBIAN-CVE-2022-3515","description":"A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.","status":"published","published":"2023-01-12T15:15:10.187Z","modified":"2026-11-03T06:02:39.437771846Z","updated_at":"2026-11-03T06:43:43.638289Z"},{"id":"DLA-3153-1","title":"libksba - security update","status":"published","published":"2022-10-17T00:00:00Z","modified":"2026-03-09T01:22:46.270088Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5255-1","title":"libksba - security update","status":"published","published":"2022-10-17T00:00:00Z","modified":"2026-03-09T02:10:31.110282Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0404","title":"Updated libksba packages fix security vulnerability","description":"Integer Overflow in LibKSBA. (CVE-2022-3515)\n","status":"published","published":"2022-11-01T22:58:59Z","modified":"2026-04-16T04:42:56.088244173Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12418-1","title":"libksba-devel-1.6.2-1.1 on GA media","description":"These are all security issues fixed in the libksba-devel-1.6.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:14:11.367038Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3681-1","title":"Security update for libksba","description":"This update for libksba fixes the following issues:\n\n  - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).\n","status":"published","published":"2022-10-21T08:47:04Z","modified":"2026-02-04T04:34:39.056022Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3683-1","title":"Security update for libksba","description":"This update for libksba fixes the following issues:\n\n  - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).\n","status":"published","published":"2022-10-21T09:49:00Z","modified":"2026-02-04T04:39:08.74379Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5688-1","title":"libksba vulnerability","description":"It was discovered that an integer overflow could be triggered in Libksba\nwhen decoding certain data. An attacker could use this issue to cause a\ndenial of service (application crash) or possibly execute arbitrary code.\n","status":"published","published":"2022-10-19T05:18:18Z","modified":"2026-06-29T13:49:42.194657968Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}