Approved changes feed: RSS · Atom

cpe:2.3:a:gnupg:libksba:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnupg (cf567c2a-c134-5510-af9f-62e22a797e74)
ProductLibksba (625beecc-2736-5c8d-8ddd-6c6153a1373b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47629 vulnerable 2026-06-08 05:50:40.833489 Details available
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
Published: 2022-12-20T00:00:00.000Z
Updated: 2025-04-16T17:35:45.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3515 vulnerable 2026-06-08 05:48:21.324698 Details available
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.
Published: 2023-01-12T00:00:00.000Z
Updated: 2025-04-08T15:48:31.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4579 vulnerable 2026-06-08 05:07:55.016867 Details available
Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."
Published: 2016-06-13T19:00:00.000Z
Updated: 2024-08-06T00:32:25.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4574 vulnerable 2026-06-08 05:07:54.981363 Details available
Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.
Published: 2016-06-13T19:00:00.000Z
Updated: 2024-08-06T00:32:25.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4356 vulnerable 2026-06-08 05:07:47.219358 Details available
The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.
Published: 2016-06-13T19:00:00.000Z
Updated: 2024-08-06T00:25:14.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4355 vulnerable 2026-06-08 05:07:47.218919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4354 vulnerable 2026-06-08 05:07:47.218545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4353 vulnerable 2026-06-08 05:07:47.217971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9087 vulnerable 2026-06-08 05:06:10.848572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.