Lucene search

K
osvGoogleOSV:PYSEC-2014-92
HistoryOct 25, 2014 - 9:55 p.m.

PYSEC-2014-92

2014-10-2521:55:00
Google
osv.dev
10

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.6%

python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to β€œoption injection through positional arguments.” NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

CPENameOperatorVersion
python-gnupgeq0.3.5
python-gnupgeq0.3.6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.6%