Summary
It was discovered that Libksba incorrectly handled parsing CRL signatures.
A remote attacker could use this issue to cause Libksba to crash, resulting
in a denial of service, or possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libksba | 1.3.5-2ubuntu0.18.04.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | libksba | 1.3.5-2ubuntu0.20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | libksba | 1.6.0-2ubuntu0.2 |
Vulnerabilities 1
-
Critical 9.8
Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
References
-
report
https://ubuntu.com/security/CVE-2022-47629