CVE-2019-13050

🗓️ 02 Apr 2020 20:05:08Reported by redhat.comType

Interaction vulnerability between SKS keyserver network and GnuPG could lead to persistent denial of service due to Certificate Spamming Attack. Mitigation involves keyserver configuration removal and switching to keys.openpgp.org for enhanced security features

Reporter	Title	Published	Views	Family All 64
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities (CVE-2008-5730, CVE-2015-5237, CVE-2018-12020, CVE-2019-13050, CVE-2019-14855, CVE-2019-1543, CVE-2020-25125, CVE-2021-3712, CVE-2022-31130, CVE-2023-0464, CVE-2022-1292)	11 Aug 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
Tenable Nessus	AlmaLinux 8 : gnupg2 (ALSA-2020:4490)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : gnupg2 (CESA-2020:4490)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : gnupg2 (EulerOS-SA-2020-1153)	25 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : gnupg2 (EulerOS-SA-2020-1358)	2 Apr 202000:00	–	nessus
Tenable Nessus	Fedora 30 : gnupg2 (2019-2f259a6c0a)	19 Jul 201900:00	–	nessus
Tenable Nessus	MiracleLinux 8 : gnupg2-2.2.20-2.el8 (AXSA:2021-1082:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.02 : gnupg2 Vulnerability (NS-SA-2021-0076)	10 Mar 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : gpg2 (openSUSE-2019-1917)	20 Aug 201900:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-13050
access	www.access.redhat.com/articles/4264021
gist	www.gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

24 Jan 2024 10:40Current

0.6Low risk

Vulners AI Score0.6

CVSS 25

CVSS 3.17.5

CVSS 36.5

EPSS0.00554