Libksba
Vendor:
First CVE: Dec 1, 2014 · Active for 11 years
9
Total CVEs
More Total CVEs than 88% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 72% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libksba over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 1, 2014
11 years ago
Most Recent CVE
Jan 12, 2023
1,292 days ago
CVE Severity & Scoring
Libksba9 CVEs
78%
22%
All CVEs352,785 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network8 (88.9%)
Unknown1 (11.1%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (88.9%)
High0 (0.0%)
Unknown1 (11.1%)
User Interaction
None8 (88.9%)
Unknown1 (11.1%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None8 (88.9%)
Unknown1 (11.1%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-3515CRITICAL A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target syst | Jan 12, 2023 | 9.8 | 32 | NO | NO |
CVE-2022-47629CRITICAL Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. | Dec 20, 2022 | 9.8 | 32 | NO | NO |
CVE-2016-4579HIGH Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from | Jun 13, 2016 | 7.5 | 26 | NO | NO |
CVE-2014-9087HIGH Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) | Dec 1, 2014 | 7.5 | 26 | NO | NO |
CVE-2016-4574HIGH Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via in | Jun 13, 2016 | 7.5 | 25 | NO | NO |
CVE-2016-4356HIGH The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit o | Jun 13, 2016 | 7.5 | 25 | NO | NO |
CVE-2016-4353HIGH ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service (abort) via crafted BER data. | Jun 13, 2016 | 7.5 | 25 | NO | NO |
CVE-2016-4355HIGH Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overfl | Jun 13, 2016 | 7.5 | 24 | NO | NO |
CVE-2016-4354HIGH ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a | Jun 13, 2016 | 7.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Libksba
Top CWEs
Versions
No cataloged versions.