Lucene search

K
redosRedosROS-20240815-02
HistoryAug 15, 2024 - 12:00 a.m.

ROS-20240815-02

2024-08-1500:00:00
redos.red-soft.ru
39
gnupg
cpr.c
vulnerability
remote
access
confidential data
integrity

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

7.3

Confidence

Low

The vulnerability of the write_status_text_and_buffer function of the cpr.c component of the program for information encryption and
creation of electronic digital signatures GnuPG is related to insufficient neutralization of special
elements in the request. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data and breach the request.
access to confidential data and violate its integrity

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gnupg2< 2.2.20-3UNKNOWN

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

7.3

Confidence

Low