← Vulnerability feed

Vulnerability record · CVE-2022-3515 · published 12 January 2023

CVE-2022-3515: Gnupg libksba integer overflow vulnerability

Gnupg · Libksba

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

9.8 CVSS 3.1 Critical EPSS 1.6% · top 24.5% CWE-190 · Integer overflow
9.8CVSS 3.1 base score
1.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
10References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/security/cve/CVE-2022-3515 PatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2135610 ExploitIssue TrackingThird Party Advisory
https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b ExploitPatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20230706-0008/
https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-3515 PatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2135610 ExploitIssue TrackingThird Party Advisory
https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b ExploitPatchThird Party Advisory
https://security.netapp.com/advisory/ntap-20230706-0008/
https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html Third Party Advisory

Track CVE-2022-3515 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-6235Gnu privacy guard vulnerabilityA "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary c…EPSS 5.9%9.8CVE-2026-24881Gnupg stack-based buffer overflow vulnerabilityIn GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflo…EPSS 1.8%9.8CVE-2022-47629Gnupg libksba integer overflow vulnerabilityLibksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.EPSS 1.6%9.3CVE-2008-1530Gnupg vulnerabilityGnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate ke…EPSS 4.3%8.8CVE-2018-1000858Gnupg cross-site request forgery vulnerabilityGnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Infor…EPSS 1.0%8.1CVE-2010-2547Gnupg use after free vulnerabilityUse-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) a…EPSS 5.3%7.8CVE-2026-24882Gnupg stack-based buffer overflow vulnerabilityIn GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.EPSS 0.44%7.8CVE-2020-25125Gnupg classic buffer overflow vulnerabilityGnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2022-3515), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.