Gnupg Libksba
9 CVEs affecting Gnupg Libksba. Latest disclosed: 2023-01-12. Critical: 2, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3515 | Critical | 9.8 | 2023-01-12 | A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code executi… |
CVE-2022-47629 | Critical | 9.8 | 2022-12-20 | Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. |
CVE-2016-4579 | High | 7.5 | 2016-06-13 | Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned leng… |
CVE-2016-4574 | High | 7.5 | 2016-06-13 | Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-o… |
CVE-2016-4356 | High | 7.5 | 2016-06-13 | The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by cl… |
CVE-2016-4355 | High | 7.5 | 2016-06-13 | Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which lea… |
CVE-2016-4354 | High | 7.5 | 2016-06-13 | ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER d… |
CVE-2016-4353 | High | 7.5 | 2016-06-13 | ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service (abort) via… |
CVE-2014-9087 | | 2014-12-01 | Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a… |