Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-3515

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

Published

2023-01-12T15:15:10.187

Last Modified

2025-04-08T16:15:19.830

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Primary
CWE-190
Type: Secondary
CWE-190

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	gnupg	libksba	< 1.6.3	Yes
Application	gpg4win	gpg4win	< 4.1.0	Yes
Application	gnupg	vs-desktop	< 3.1.26	Yes
Application	gnupg	gnupg	< 2.2.41	Yes
Application	gnupg	gnupg	< 2.4.0	Yes

References

https://access.redhat.com/security/cve/CVE-2022-3515 Patch, Third Party Advisory ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=2135610 Exploit, Issue Tracking, Third Party Advisory ([email protected])
https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b Exploit, Patch, Third Party Advisory ([email protected])
https://security.netapp.com/advisory/ntap-20230706-0008/ ([email protected])
https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html Third Party Advisory ([email protected])
https://access.redhat.com/security/cve/CVE-2022-3515 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=2135610 Exploit, Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b Exploit, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20230706-0008/ (af854a3a-2127-422b-91ae-364da2661108)
https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)