OESA-2022-2021

    Dashboard / Vulnerabilities / OESA-2022-2021

    OESA-2022-2021

    Published: 28 Oct 2022Last Modified: 18 Aug 2026
    Upstream:
    CVE-2022-3515

    Summary: libksba security update

    Details: Libksba is a library to make the tasks of working with X.509 certificates,CMS data and related objects more easy. It provides a highlevel interface to the implemented protocols and presents the data in a consistent way. Security Fix(es): A bug found in libksba, the library used by GnuPG for parsing the ASN.1 structures as used by S/MIME. The bug affects all versions of Libksba before 1.6.2 and may be used for remote code execution. https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html https://dev.gnupg.org/T6230 https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b https://lwn.net/Articles/911467/(CVE-2022-3515)

    References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2021, https://nvd.nist.gov/vuln/detail/CVE-2022-3515

    Affected packages

    Package

    Name: libksba

    Purl: pkg:rpm/openEuler/libksba&distro=openEuler-20.03-LTS-SP1

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.4.0-3.oe1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High