Test ID:	1.3.6.1.4.1.25623.1.1.2.2023.2210
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for libksba (EulerOS-SA-2023-2210)
Summary:	The remote host is missing an update for the Huawei EulerOS 'libksba' package(s) announced via the EulerOS-SA-2023-2210 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'libksba' package(s) announced via the EulerOS-SA-2023-2210 advisory. Vulnerability Insight: A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.(CVE-2022-3515) Affected Software/OS: 'libksba' package(s) on Huawei EulerOS Virtualization for ARM 64 3.0.6.0. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-3515 https://access.redhat.com/security/cve/CVE-2022-3515 https://bugzilla.redhat.com/show_bug.cgi?id=2135610 https://dev.gnupg.org/rK4b7d9cd4a018898d7714ce06f3faf2626c14582b https://www.gnupg.org/blog/20221017-pepe-left-the-ksba.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.