CVE-2022-3515

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3515
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3515.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-3515
Downstream
Related
Published
2023-01-12T00:00:00Z
Modified
2026-06-27T12:00:12.028993733Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "last_affected": "Fixed in libksba v1.6.2"
                }
            ]
        }
    ],
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3515.json"
}
References

Affected packages

Git / github.com/gpg/libksba

Affected ranges

Type
GIT
Repo
https://github.com/gpg/libksba
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
bffa9b346071725363a483db547e7dced9721cb5
Database specific 
{
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.6.3"
        }
    ],
    "cpe": "cpe:2.3:a:gnupg:libksba:*:*:*:*:*:*:*:*"
}

Affected versions

Other
debian/V0-0-0
debian/V0-2-0
debian/V0-2-1
debian/V0-2-2
debian/V0-2-3
debian/V0-4-0
debian/V0-4-1
debian/V0-4-2
debian/V0-4-3
debian/V0-4-4
debian/V0-4-5
debian/libksba-0-4-6
debian/libksba-0-4-7
debian/libksba-0-9-0
debian/libksba-0-9-1
debian/libksba-0-9-10
debian/libksba-0-9-11
debian/libksba-0-9-12
debian/libksba-0-9-2
debian/libksba-0-9-3
debian/libksba-0-9-4
debian/libksba-0-9-5
debian/libksba-0-9-6
debian/libksba-0-9-7
debian/libksba-0-9-8
debian/libksba-0-9-9
debian/libksba-0.*
debian/libksba-0.9.13
debian/libksba-0.9.14
debian/libksba-0.9.15
debian/libksba-0.9.16
debian/libksba-1.*
debian/libksba-1.0.1
debian/libksba-1.0.2
debian/libksba-1.0.3
debian/libksba-1.0.4
debian/libksba-1.0.5
debian/libksba-1.0.6
debian/libksba-1.0.7
debian/libksba-1.0.8
debian/libksba-1.1.0
libksba-1.*
libksba-1.2.0
libksba-1.3.0
libksba-1.3.1
libksba-1.3.2
libksba-1.3.3
libksba-1.3.4
libksba-1.3.5
libksba-1.4.0
libksba-1.5.0
libksba-1.5.1
libksba-1.6.0
libksba-1.6.1
libksba-1.6.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3515.json"