Lucene search
MitreCVELIST:CVE-2018-12020HistoryJun 08, 2018 - 9:00 p.m.
CVE-2018-12020
2018-06-0821:00:00
mitre
raw.githubusercontent.com
mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the “–status-fd 2” option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.
Related
nessus
nessus
Fedora 27 : gnupg (2018-69780fc4d7)
2018-07-06 00:00:00
CentOS 6 : gnupg2 (CESA-2018:2180)
2018-07-16 00:00:00
Debian DSA-4222-1 : gnupg2 - security update
2018-06-11 00:00:00
oraclelinux
oraclelinux
gnupg2 security update
2018-07-11 00:00:00
gnupg2 security update
2018-07-11 00:00:00
ibm
ibm
suse
suse
Security update for gpg2 (important)
2018-06-16 15:13:42
Security update for python-python-gnupg (moderate)
2018-06-16 15:12:27
Security update for enigmail (moderate)
2018-06-15 21:12:53
fedora
fedora
[SECURITY] Fedora 28 Update: gnupg-1.4.23-1.fc28
2018-06-20 01:57:46
[SECURITY] Fedora 27 Update: gnupg2-2.2.8-1.fc27
2018-06-18 15:17:55
[SECURITY] Fedora 28 Update: libgpg-error-1.31-1.fc28
2018-06-18 16:20:36
redhat
redhat
(RHSA-2018:2181) Important: gnupg2 security update
2018-07-11 19:49:36
(RHSA-2018:2180) Important: gnupg2 security update
2018-07-11 19:49:05
ubuntucve
ubuntucve
CVE-2018-12020
2018-06-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2018-1221)
2020-01-23 00:00:00
Ubuntu: Security Advisory (USN-3675-3)
2022-08-26 00:00:00
Fedora Update for libgpg-error FEDORA-2018-84fdbd021f
2018-06-19 00:00:00
slackware
slackware
[slackware-security] gnupg
2018-06-19 22:39:15
[slackware-security] gnupg2
2018-06-08 20:37:18
centos
centos
gnupg2 security update
2018-07-13 16:27:56
gnupg2 security update
2018-07-13 16:56:38
osv
osv
gnupg1 - security update
2018-06-08 00:00:00
gnupg2 - security update
2018-06-08 00:00:00
CVE-2018-12020
2018-06-08 21:29:00
thn
thn
GnuPG Flaw in Encryption Tools Lets Attackers Spoof Anyone's Signature
2018-06-15 09:52:00
debian
debian
[SECURITY] [DSA 4223-1] gnupg1 security update
2018-06-08 21:51:39
[SECURITY] [DSA 4222-1] gnupg2 security update
2018-06-08 21:51:34
[SECURITY] [DSA 4223-1] gnupg1 security update
2018-06-08 21:51:39
mageia
mageia
Updated gnupg gnupg2 packages fix a security vulnerability
2018-06-20 02:42:28
Updated thunderbird packages fix security vulnerabilities
2018-08-24 02:35:07
Updated thunderbird packages fix security vulnerabilities
2018-07-24 01:27:34
ubuntu
ubuntu
GnuPG vulnerability
2018-06-18 00:00:00
GnuPG 2 vulnerability
2018-06-15 00:00:00
python-gnupg vulnerabilities
2021-03-15 00:00:00
veracode
veracode
Spoofable Output
2019-01-15 09:24:16
f5
f5
K55121327 : GnuPG vulnerability CVE-2018-12020
2018-09-04 00:00:00
cve
cve
CVE-2018-12020
2018-06-08 21:29:00
debiancve
debiancve
CVE-2018-12020
2018-06-08 21:29:00
alpinelinux
alpinelinux
CVE-2018-12020
2018-06-08 21:29:00
amazon
amazon
Important: gnupg, gnupg2
2018-06-27 21:57:00
Important: gnupg2
2018-08-08 16:34:00
redhatcve
redhatcve
CVE-2018-12020
2020-01-11 09:29:40
archlinux
archlinux
[ASA-201806-8] gnupg: content spoofing
2018-06-11 00:00:00
prion
prion
Code injection
2018-06-08 21:29:00
freebsd
freebsd
gnupg -- unsanitized output (CVE-2018-12020)
2018-06-07 00:00:00
cloudfoundry
cloudfoundry
USN-3675-1: GnuPG vulnerabilities | Cloud Foundry
2018-06-20 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2019-0207
2019-02-08 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2019-2.0-0128
2019-02-13 00:00:00
Critical Photon OS Security Update - PHSA-2019-0128
2019-02-13 00:00:00