CVE-2022-47629

Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

• CWE-190
• CWE-190

• https://dev.gnupg.org/T6284Patch, Third Party Advisory
• https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
• https://lists.debian.org/debian-lts-announce/2022/12/msg00035.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202212-07Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230316-0011/
• https://www.debian.org/security/2022/dsa-5305Third Party Advisory
• https://dev.gnupg.org/T6284Patch, Third Party Advisory
• https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libksba.git%3Ba=commit%3Bh=f61a5ea4e0f6a80fd4b28ef0174bee77793cf070
• https://lists.debian.org/debian-lts-announce/2022/12/msg00035.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202212-07Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230316-0011/
• https://www.debian.org/security/2022/dsa-5305Third Party Advisory

Published

Dec 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47614Unauth. SQL Injection (SQLi) vulnerability in InspireUI MSto…7.5
• CVE-2022-47615Local File Inclusion vulnerability in LearnPress – WordPress…9.8
• CVE-2022-47616Hitron CODA-5310 has insufficient filtering for specific par…7.2
• CVE-2022-47617Hitron CODA-5310 has hard-coded encryption/decryption keys i…7.2
• CVE-2022-47618Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded admini…9.8
• CVE-2022-4762The Materialis Companion WordPress plugin before 1.3.40 does…5.4
• CVE-2022-4763The Icon Widget WordPress plugin before 1.3.0 does not valid…5.4
• CVE-2022-47630Trusted Firmware-A through 2.8 has an out-of-bounds read in …7.4
• CVE-2022-47631Razer Synapse through 3.7.1209.121307 allows privilege escal…7.8
• CVE-2022-47632Razer Synapse before 3.7.0830.081906 allows privilege escala…6.8
• CVE-2022-47633An image signature validation bypass vulnerability in Kyvern…8.1
• CVE-2022-47634M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 …8.1