According to the versions of the libksba package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The     vulnerability can be exploited remotely for code execution on the target system by passing specially     crafted data to the application, for example, a malicious S/MIME attachment. (CVE-2022-3515)

  - Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.
    (CVE-2022-47629)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of libksba installed on the remote host is prior to 1.3.5-1.10. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1649 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-3ef41c3410 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5255 advisory.

  - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The     vulnerability can be exploited remotely for code execution on the target system by passing specially     crafted data to the application, for example, a malicious S/MIME attachment. (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7088 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7089 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:7209 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:7088 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5688-2 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7090 advisory.

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202210-23 (libksba: Remote Code Execution)

  - libksba: integer overflow may lead to remote code execution (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7090 advisory.

  - A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The     vulnerability can be exploited remotely for code execution on the target system by passing specially     crafted data to the application, for example, a malicious S/MIME attachment. (CVE-2022-3515)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
175753	EulerOS Virtualization 2.10.0 : libksba (EulerOS-SA-2023-1935)	Nessus	Huawei Local Security Checks	5/16/2023	5/16/2023	critical
174862	EulerOS Virtualization 2.9.0 : libksba (EulerOS-SA-2023-1674)	Nessus	Huawei Local Security Checks	4/27/2023	4/27/2023	critical
168605	Amazon Linux AMI : libksba (ALAS-2022-1649)	Nessus	Amazon Linux Local Security Checks	12/10/2022	9/15/2023	critical
169164	Fedora 36 : libksba (2022-3ef41c3410)	Nessus	Fedora Local Security Checks	12/22/2022	9/12/2023	critical
166175	Debian DSA-5255-1 : libksba - security update	Nessus	Debian Local Security Checks	10/17/2022	10/9/2023	critical
166435	Oracle Linux 7 : libksba (ELSA-2022-7088)	Nessus	Oracle Linux Local Security Checks	10/24/2022	10/9/2023	critical
166444	RHEL 8 : libksba (RHSA-2022:7089)	Nessus	Red Hat Local Security Checks	10/25/2022	4/28/2024	critical
166521	RHEL 8 : libksba (RHSA-2022:7209)	Nessus	Red Hat Local Security Checks	10/26/2022	4/28/2024	critical
166547	CentOS 7 : libksba (CESA-2022:7088)	Nessus	CentOS Local Security Checks	10/26/2022	10/6/2023	critical
166560	Ubuntu 22.10 : Libksba vulnerability (USN-5688-2)	Nessus	Ubuntu Local Security Checks	10/26/2022	7/10/2023	critical
166613	AlmaLinux 9 : libksba (ALSA-2022:7090)	Nessus	Alma Linux Local Security Checks	10/27/2022	10/6/2023	critical
166725	GLSA-202210-23 : libksba: Remote Code Execution	Nessus	Gentoo Local Security Checks	10/31/2022	10/6/2023	critical
185046	Rocky Linux 9 : libksba (RLSA-2022:7090)	Nessus	Rocky Linux Local Security Checks	11/7/2023	11/7/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical