Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-25125HistorySep 03, 2020 - 6:15 p.m.
CVE-2020-25125
2020-09-0318:15:00
Debian Security Bug Tracker
security-tracker.debian.org
9
0.003 Low
EPSS
Percentile
65.0%
GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker’s OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | gnupg2 | < 2.2.40-1.1 | gnupg2_2.2.40-1.1_all.deb |
| Debian | 11 | all | gnupg2 | < 2.2.27-2+deb11u2 | gnupg2_2.2.27-2+deb11u2_all.deb |
| Debian | 10 | all | gnupg2 | < 2.2.12-1+deb10u2 | gnupg2_2.2.12-1+deb10u2_all.deb |
| Debian | 999 | all | gnupg2 | < 2.2.43-6 | gnupg2_2.2.43-6_all.deb |
| Debian | 13 | all | gnupg2 | < 2.2.40-3 | gnupg2_2.2.40-3_all.deb |
Related
nessus
nessus
EulerOS Virtualization 2.10.1 : gnupg2 (EulerOS-SA-2022-2052)
2022-07-15 00:00:00
FreeBSD : gnupg -- AEAD key import overflow (f9fa7adc-ee51-11ea-a240-002590acae31)
2020-09-04 00:00:00
EulerOS Virtualization 2.10.0 : gnupg2 (EulerOS-SA-2022-2024)
2022-07-15 00:00:00
prion
prion
Buffer overflow
2020-09-03 18:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-2052)
2022-07-14 00:00:00
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-1486)
2022-04-20 00:00:00
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2022-1505)
2022-04-20 00:00:00
osv
osv
CVE-2020-25125
2020-09-03 18:15:15
redhatcve
redhatcve
CVE-2020-25125
2020-09-04 14:48:51
ubuntucve
ubuntucve
CVE-2020-25125
2020-09-03 00:00:00
freebsd
freebsd
gnupg -- AEAD key import overflow
2020-09-03 00:00:00
archlinux
archlinux
[ASA-202009-5] gnupg: arbitrary code execution
2020-09-07 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-09-30 09:41:55
cvelist
cvelist
CVE-2020-25125
2020-09-03 17:48:07
cve
cve
CVE-2020-25125
2020-09-03 18:15:00
alpinelinux
alpinelinux
CVE-2020-25125
2020-09-03 18:15:00