CVE:CVE-2022-3515
CNNVD:CNNVD-202210-1171
libksba是GnuPG Mirrors开源的一个使处理 X.509 证书、CMS 数据和相关对象的任务更加容易的库。
libksba 1.3.5-2+deb10u1版本存在安全漏洞，该漏洞源于CRL解析器中存在整数溢出，这可能导致拒绝服务或执行任意代码。
solution:Upgrade gnupg libksba to a higher version than 1.6.3,and avoid the version (,1.6.3); Upgrade gpg4win gpg4win to a higher version than 4.1.0,and avoid the version [2.0.0,4.1.0); Upgrade gnupg vs-desktop to a higher version than 3.1.26,and avoid the version [3.1.16,3.1.26); Upgrade gnupg gnupg to a higher version than 2.2.41,2.4.0,and avoid the version [2.1.0,2.2.41),[2.3.0,2.4.0)