CVE-2022-3515 — Integer Overflow or Wraparound in Libksba
Severity
9.8CRITICALNVD
EPSS
0.2%
top 62.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 12
Latest updateApr 10
Description
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages7 packages
Patches
🔴Vulnerability Details
3OSV▶
CVE-2022-3515: A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser↗2023-01-12
GHSA▶
GHSA-58wq-p76f-6qjh: A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser↗2023-01-12
CVEList▶
CVE-2022-3515: A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser↗2023-01-12
📋Vendor Advisories
7Microsoft▶
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specia↗2023-01-10