EulerOS Virtualization for ARM 64 3.0.2.0 : gnupg2 (EulerOS-SA-2020-1232)

According to the version of the gnupg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent...

Debian DSA-4617-1 : qtbase-opensource-src - security update

Two security issues were found in the Qt library, which could result in plugins and libraries being loaded from the current working directory, resulting in potential code execution. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2019-2393)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2019-2589)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : gnupg2 (EulerOS-SA-2019-2393)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in...

Amazon Linux 2 : gnupg2 (ALAS-2019-1203)

The douncompress function in g10/compress.c allows context-dependent attackers to cause a denial of service infinite loop via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.CVE-2014-4617 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

Medium: gnupg2

Issue Overview: The douncompress function in g10/compress.c allows context-dependent attackers to cause a denial of service infinite loop via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.CVE-2014-4617 Affected Packages: gnupg2 Note: This advisory is applicable to...

CVE-2015-4617

creationtimestamp| type| source ---|---|--- 2019-02-16 00:24:13+00:00| seen| https://t.me/cibsecurity/2592...

CVE-2017-4617

...

CVE-2017-4617

CVE-2017-4617 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-4617

An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component...

CVE-2016-4617

CVE-2016-4617 affects macOS prior to 10.12 through a sandbox-escape in the libxpc component, related to launchctl process spawning. Connected sources (e.g., CNVD-2017-02507, NVD entry, and Apple security content) corroborate that libxpc had multiple sandbox-spawning weaknesses exploitable to brea...

Amazon Linux: Security Advisory (ALAS-2014-379)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for gnupg2 FEDORA-2015-5969

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla Component com_jotloader SQL Injection (CVE-2008-2564; CVE-2010-4617)

An SQL injection vulnerability has been reported in Kanich Com Jotloader. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Medium: gnupg2

Issue Overview: The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service infinite loop via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence. Affected Packages: gnupg2...

Medium: gnupg

Issue Overview: The douncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service infinite loop via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence. Affected Packages: gnupg...

GLSA-201407-04 : GnuPG: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201407-04 GnuPG: Denial of Service GnuPG does not properly handle a specially crated compressed packet resulting in an infinite loop. Impact : A context-dependent attacker can cause a Denial of Service. Workaround : There is no...

SuSE 11.3 Security Update : GPG2 (SAT Patch Number 9433)

GPG2 has been updated to fix a possible denial of service. This security issue has been fixed : - Denial of service through infinite loop with garbled compressed data packets CVE-2014-4617 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Mandriva Linux Security Advisory : gnupg (MDVSA-2014:127)

Updated gnupg and gnupg2 packages fix security vulnerability : GnuPG versions before 1.4.17 and 2.0.24 are vulnerable to a denial of service which can be caused by garbled compressed data packets which may put gpg into an infinite loop CVE-2014-4617. %NASLMINLEVEL 70300 C Tenable Network Security...