5.8

CVE-2012-6085

Exploit
The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnupg ≫ Gnupg Version1.4.0
Gnupg ≫ Gnupg Version1.4.2
Gnupg ≫ Gnupg Version1.4.3
Gnupg ≫ Gnupg Version1.4.4
Gnupg ≫ Gnupg Version1.4.5
Gnupg ≫ Gnupg Version1.4.8
Gnupg ≫ Gnupg Version1.4.10
Gnupg ≫ Gnupg Version1.4.11
Gnupg ≫ Gnupg Version1.4.12
Gnupg ≫ Gnupg Version2.0
Gnupg ≫ Gnupg Version2.0.1
Gnupg ≫ Gnupg Version2.0.3
Gnupg ≫ Gnupg Version2.0.4
Gnupg ≫ Gnupg Version2.0.5
Gnupg ≫ Gnupg Version2.0.6
Gnupg ≫ Gnupg Version2.0.7
Gnupg ≫ Gnupg Version2.0.8
Gnupg ≫ Gnupg Version2.0.10
Gnupg ≫ Gnupg Version2.0.11
Gnupg ≫ Gnupg Version2.0.12
Gnupg ≫ Gnupg Version2.0.13
Gnupg ≫ Gnupg Version2.0.14
Gnupg ≫ Gnupg Version2.0.15
Gnupg ≫ Gnupg Version2.0.16
Gnupg ≫ Gnupg Version2.0.17
Gnupg ≫ Gnupg Version2.0.18
Gnupg ≫ Gnupg Version2.0.19
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.91% 0.852
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:N/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git%3Ba=commitdiff%3Bh=f0b33b6fb8e0586e9584a7a409dcc31263776a67
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095513.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095516.html
http://rhn.redhat.com/errata/RHSA-2013-1459.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:001
http://www.openwall.com/lists/oss-security/2013/01/01/6
http://www.securityfocus.com/bid/57102
http://www.ubuntu.com/usn/USN-1682-1
https://bugs.g10code.com/gnupg/issue1455
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=891142
https://exchange.xforce.ibmcloud.com/vulnerabilities/80990