The vulnerability of the network software SKS Keyserver and the GNU Privacy Guard (GnuPG) software for encrypting information and generating digital signatures arises from the lack of verification of host data in the certificates. This allows attackers to trigger a service failure.

🗓️ 20 Aug 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Vulnerability in SKS Keyserver and GNU Privacy Guard certificate host data verification enables remote service failure.

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities (CVE-2008-5730, CVE-2015-5237, CVE-2018-12020, CVE-2019-13050, CVE-2019-14855, CVE-2019-1543, CVE-2020-25125, CVE-2021-3712, CVE-2022-31130, CVE-2023-0464, CVE-2022-1292)	11 Aug 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
Tenable Nessus	AlmaLinux 8 : gnupg2 (ALSA-2020:4490)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : gnupg2 (CESA-2020:4490)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : gnupg2 (EulerOS-SA-2020-1153)	25 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : gnupg2 (EulerOS-SA-2020-1358)	2 Apr 202000:00	–	nessus
Tenable Nessus	Fedora 30 : gnupg2 (2019-2f259a6c0a)	19 Jul 201900:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gnupg2-2.2.20-2.el8 (AXSA:2021-1082:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.02 : gnupg2 Vulnerability (NS-SA-2021-0076)	10 Mar 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : gpg2 (openSUSE-2019-1917)	20 Aug 201900:00	–	nessus

Vulners

Node

novell suse_linux_enterprise_module_for_basesystemMatch15

OR

fedora fedoraMatch29

OR

novell opensuse_leapMatch15.0

OR

novell opensuse_leapMatch15.1

OR

fedora fedoraMatch30

Source	Link
gist	www.gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/AUK2YRO6QIH64WP2LRA5D4LACTXQPPU4/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/CP4ON34YEXEZDZOXXWV43KVGGO6WZLJ5/
lists	www.lists.gnupg.org/pipermail/gnupg-announce/2019q3/000439.html
twitter	www.twitter.com/lambdafu/status/1147162583969009664
access	www.access.redhat.com/security/cve/cve-2019-13050
lists	www.lists.opensuse.org/opensuse-security-announce/2019-08/msg00039.html
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 37.5

CVSS 27.8

EPSS0.02663

SKS Keyserver GNU Privacy Guard certificate data verification host data verification remote service failure