Lucene search

K
freebsdFreeBSD90CA3BA5-19E6-11E4-8616-001B3856973B
HistoryJun 25, 2014 - 12:00 a.m.

gpgme -- heap-based buffer overflow in gpgsm status handler

2014-06-2500:00:00
vuxml.freebsd.org
16

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.036

Percentile

91.6%

Tomas Trnka reports:

Gpgme contains a buffer overflow in the gpgsm status handler
that could possibly be exploited using a specially crafted certificate.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgpgme< 1.5.0UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.036

Percentile

91.6%