According to the versions of the libksba package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:0625 advisory.

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libksba package has been released.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0021 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-47629:
    Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0593 advisory.

    KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by     other applications. Both specifications are building blocks of S/MIME and TLS.

    Security Fix(es):

    * libksba: integer overflow to code executiona (CVE-2022-47629)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0626 advisory.

    KSBA (pronounced Kasbah) is a library to make X.509 certificates as well as the CMS easily accessible by     other applications. Both specifications are building blocks of S/MIME and TLS.

    Security Fix(es):

    * libksba: integer overflow to code executiona (CVE-2022-47629)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-0626 advisory.

    [1.5.1-6]
    - Fix for CVE-2022-47629 (#2161571)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:0626 advisory.

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libksba installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47629 advisory.

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libksba package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The     vulnerability can be exploited remotely for code execution on the target system by passing specially     crafted data to the application, for example, a malicious S/MIME attachment. (CVE-2022-3515)

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2023_0626 advisory.

    * libksba: integer overflow to code executiona (CVE-2022-47629)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
177036	EulerOS 2.0 SP5 : libksba (EulerOS-SA-2023-2155)	Nessus	Huawei Local Security Checks	6/9/2023	1/16/2024	critical
190145	CentOS 8 : libksba (CESA-2023:0625)	Nessus	CentOS Local Security Checks	2/8/2024	2/8/2024	critical
204201	Photon OS 5.0: Libksba PHSA-2023-5.0-0010	Nessus	PhotonOS Local Security Checks	7/24/2024	10/13/2026	critical
236108	Alibaba Cloud Linux 3 : 0021: libksba (ALINUX3-SA-2023:0021)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	critical
171028	RHEL 8 : libksba (RHSA-2023:0593)	Nessus	Red Hat Local Security Checks	2/6/2023	11/7/2024	critical
171093	RHEL 9 : libksba (RHSA-2023:0626)	Nessus	Red Hat Local Security Checks	2/7/2023	11/7/2024	critical
171115	Oracle Linux 9 : libksba (ELSA-2023-0626)	Nessus	Oracle Linux Local Security Checks	2/8/2023	10/22/2024	critical
171541	Rocky Linux 9 : libksba (RLSA-2023:0626)	Nessus	Rocky Linux Local Security Checks	2/16/2023	11/7/2023	critical
173027	CBL Mariner 2.0 Security Update: libksba (CVE-2022-47629)	Nessus	MarinerOS Local Security Checks	3/20/2023	2/10/2025	critical
176827	EulerOS Virtualization 2.11.1 : libksba (EulerOS-SA-2023-2055)	Nessus	Huawei Local Security Checks	6/7/2023	6/7/2023	critical
356544	Rocky Linux 9 [CIQ] Security Update: libksba / libksba-debuginfo / libksba-debugsource / libksba-devel (crlsa-2023_0626)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical