Lucene search

K
nvd[email protected]NVD:CVE-2008-1530
HistoryMar 27, 2008 - 11:44 p.m.

CVE-2008-1530

2008-03-2723:44:00
CWE-399
web.nvd.nist.gov
3

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.041

Percentile

92.3%

GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers “memory corruption around deduplication of user IDs.”

Affected configurations

Nvd
Node
gnupggnupgMatch1.4.8
OR
gnupggnupgMatch2.0.8

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.041

Percentile

92.3%