CVE-2008-1530
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and...
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
Exploit likelihood
What each source reports
NVD Score used
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
- Record
CVE-2008-1530- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
- Record
CVE-2008-1530- Updated
- 2026-11-02
EUVDEUVD-2008-1531 No score
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
- Record
EUVD-2008-1531- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9r93-hrx4-h834 No score
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and...
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
- Record
GHSA-9r93-hrx4-h834- Updated
- 2026-11-02
OSV No score
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
- Record
CVE-2008-1530- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-1530 No score
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
- Record
DEBIAN-CVE-2008-1530- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10815-1 No score
dirmngr-2.2.27-2.4 on GA media
These are all security issues fixed in the dirmngr-2.2.27-2.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10815-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1530 is a high vulnerability (CVSS 9.3) in Gnupg, published March 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.30%, the 91st percentile. Fixed in gnupg2 2.0.9-1.
References
vupen.com/english/advisories/2008/1056/references
lists.gnupg.org/pipermail/gnupg-announce/2008q1/000272.html
exchange.xforce.ibmcloud.com/vulnerabilities/41547
ocert.org/advisories/ocert-2008-1.html
securityfocus.com/bid/28487
bugs.g10code.com/gnupg/issue894
Show 13 moreShow less
bugs.gentoo.org/show_bug.cgi?id=214990
secunia.com/advisories/29568
nvd.nist.gov/vuln/detail/CVE-2008-1530
github.com/advisories/GHSA-9r93-hrx4-h834
security-tracker.debian.org/tracker/CVE-2008-1530
suse.com/security/cve/CVE-2006-0455