gpg2 vulnerabilities (openSUSE)
21 vulnerabilities.
-
gpg2openSUSE CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS... 2.9 Low -
gpg2openSUSE In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success... 3.7 Low -
gpg2openSUSE In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the... 8.4 High -
gpg2openSUSE In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized... 8.1 High -
gpg2openSUSE In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where... 7.8 High -
gpg2openSUSE In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data... 2.7 Low -
gpg2openSUSE GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information... 6.5 Medium -
gpg2openSUSE GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or... 7.8 High -
gpg2openSUSE A flaw was found in the way certificate signatures could be forged using collisions found in the... 5.3 Medium -
gpg2openSUSE Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG... 7.5 High -
gpg2openSUSE GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in... 8.8 High -
gpg2openSUSE mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and... 7.5 High -
gpg2openSUSE GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an... 7.5 High -
gpg2openSUSE The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24... 5.0 Medium -
gpg2openSUSE The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote... 5.0 Medium -
gpg2openSUSE GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage... 5.8 Medium -
gpg2openSUSE Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows... 8.1 High -
gpg2openSUSE GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and... 9.3 High -
gpg2openSUSE Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and... 6.8 Medium -
gpg2openSUSE Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial... 5.0 Medium -
gpg2openSUSE gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code... 4.6 Medium