gnupg2 vulnerabilities (Debian)
26 vulnerabilities.
-
gnupg2Debian gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When... 3.6 Low -
gnupg2Debian CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS... 2.9 Low -
gnupg2Debian In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the... 8.4 High -
gnupg2Debian In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where... 7.8 High -
gnupg2Debian In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary... 5.9 Medium -
gnupg2Debian In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data... 2.7 Low -
gnupg2Debian GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with... 3.3 Low -
gnupg2Debian GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information... 6.5 Medium -
gnupg2Debian A flaw was found in the way certificate signatures could be forged using collisions found in the... 5.3 Medium -
gnupg2Debian GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in... 8.8 High -
gnupg2Debian mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and... 7.5 High -
gnupg2Debian GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an... 7.5 High -
gnupg2Debian kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not... 5.5 Medium -
gnupg2Debian The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows... 5.5 Medium -
gnupg2Debian The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24... 5.0 Medium -
gnupg2Debian The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote... 5.0 Medium -
gnupg2Debian GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage... 5.8 Medium -
gnupg2Debian The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19,... 5.8 Medium -
gnupg2Debian Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows... 8.1 High -
gnupg2Debian GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and... 9.3 High -
gnupg2Debian GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually... 5.0 Medium -
gnupg2Debian A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0... 10.0 High -
gnupg2Debian Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and... 6.8 Medium -
gnupg2Debian Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial... 5.0 Medium -
gnupg2Debian parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to... 5.0 Medium -
gnupg2Debian The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly... 10.0 High