gnupg vulnerabilities (Debian)
21 vulnerabilities.
-
gnupgDebian mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and... 7.5 High -
gnupgDebian libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a... 6.1 Medium -
gnupgDebian The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6... 5.3 Medium -
gnupgDebian The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to... 5.9 Medium -
gnupgDebian The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows... 5.5 Medium -
gnupgDebian Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal... 4.2 Medium -
gnupgDebian Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext... 2.1 Low -
gnupgDebian The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24... 5.0 Medium -
gnupgDebian GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns... 2.1 Low -
gnupgDebian The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote... 5.0 Medium -
gnupgDebian GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage... 5.8 Medium -
gnupgDebian GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other... 1.9 Low -
gnupgDebian The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19,... 5.8 Medium -
gnupgDebian GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually... 5.0 Medium -
gnupgDebian A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0... 10.0 High -
gnupgDebian Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and... 6.8 Medium -
gnupgDebian Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial... 5.0 Medium -
gnupgDebian parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to... 5.0 Medium -
gnupgDebian gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows... 5.0 Medium -
gnupgDebian gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code... 4.6 Medium -
gnupgDebian GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys... 5.0 Medium