ZeroDay Findings
Sign inSign up

Findings

CVE-2022-47629

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Published Dec 20, 2022 · updated Oct 15, 2026

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 20, 2022 · OSV.dev

    Detected

    Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

  2. Oct 15, 2026 · OSV.dev

    Fix available

    libksba fixed in 1.5.1-r1; libksba fixed in 1.6.3-r0; libksba fixed in 1.6.3-r0; libksba fixed in 1.6.3-r0

  3. Oct 15, 2026 · OSV.dev

    Fix available

    libksba fixed in 1.5.1-r1

  4. Oct 15, 2026 · OSV.dev

    Fix available

    libksba fixed in 1.6.3-r0

  5. Oct 15, 2026 · OSV.dev

    Updated

    Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

Affected

  • Alpine:v3.14 libksba0 → 1.5.1-r1
  • Alpine:v3.15 libksba0 → 1.6.3-r0
  • Alpine:v3.16 libksba0 → 1.6.3-r0
  • Alpine:v3.17 libksba0 → 1.6.3-r0
  • Alpine:v3.18 libksba0 → 1.6.3-r0
  • Alpine:v3.19 libksba0 → 1.6.3-r0
  • Alpine:v3.20 libksba0 → 1.6.3-r0
  • Alpine:v3.21 libksba0 → 1.6.3-r0
  • Alpine:v3.22 libksba0 → 1.6.3-r0
  • Alpine:v3.23 libksba0 → 1.6.3-r0
  • Alpine:v3.24 libksba0 → 1.6.3-r0

Sources

References