CriticalFix available
libksba — security advisory
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.
- Products
- libksba
- Affected versions
- Not specified
- Fixed versions
- 1.5.1-r1, 1.6.2-r0, 1.6.3-r0
- CVEs
- CVE-2022-3515
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 14:13 UTC · Revision 1
Source evidence
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.
osv:ALPINE-CVE-2022-3515
libksba
Fixed versions: 1.5.1-r1
libksba
Fixed versions: 1.6.3-r0
libksba
Fixed versions: 1.6.3-r0
libksba
Fixed versions: 1.6.2-r0
libksba
Fixed versions: 1.6.2-r0
libksba
Fixed versions: 1.6.2-r0
libksba
Fixed versions: 1.6.2-r0
libksba
Fixed versions: 1.6.2-r0
libksba
Fixed versions: 1.6.2-r0
libksba
Fixed versions: 1.6.2-r0
libksba
Fixed versions: 1.6.2-r0
Complete source record
{
"id": "b6000516148bd5c4ffd035c201523ae4e73c4cc975d6da12ac6659dd6a82aa4e",
"url": "https://osv.dev/vulnerability/ALPINE-CVE-2022-3515",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ALPINE-CVE-2022-3515",
"summary": "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
"evidence": "osv:ALPINE-CVE-2022-3515",
"products": [
{
"name": {
"value": "libksba",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.5.1-r1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.3-r0",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.3-r0",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "libksba",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.6.2-r0",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "ALPINE-CVE-2022-3515",
"aliases": [
"ALPINE-CVE-2022-3515"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.5.1-r1"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.14"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.3-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.15"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.3-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.16"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.17"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.18"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.19"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.20"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.21"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.22"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.23"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.6.2-r0"
}
]
}
],
"package": {
"name": "libksba",
"purl": "pkg:apk/alpine/libksba?arch=source",
"ecosystem": "Alpine:v3.24"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-3515.json"
},
"ecosystem_specific": {}
}
],
"modified": "2026-10-15T07:17:54.231782144Z",
"provider": "osv",
"upstream": [
"CVE-2022-3515"
],
"references": [
"https://security.alpinelinux.org/vuln/CVE-2022-3515"
]
},
"related_cves": [
{
"value": "CVE-2022-3515",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 321916,
"published_at": "2023-01-12T15:15:10.187+00:00"
}