269 matches found
CVE-2025-68973
CVE-2025-68973 affects GnuPG (gnupg2) through versions before 2.4.9. The issue is in armor_filter() in g10/armor.c where two increments of an index variable are not both intended, enabling an out-of-bounds write with crafted input. In practice, advisories describe potential information disclosure...
CVE-2025-68973
In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. For ExtendedLTS, 2.2.51 and later are fixed versions...
GNUPG security vulnerabilities
GNUPG is a suite of open source cryptographic software from the American GNU community under the GNU General Public License. The software supports public key, symmetric encryption, hashing, and other algorithms. A security vulnerability exists in GNUPG 2.4.8 and earlier versions, which stems from...
Linux Distros Unpatched Vulnerability : CVE-2025-68973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted...
ALPINE-CVE-2025-68972
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...
DEBIAN-CVE-2025-68972
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...
GnuPG: Arbitrary Code Execution
Background The GNU Privacy Guard, GnuPG, is a free replacement for the PGP suite of cryptographic software. Description A vulnerability has been discovered in GnuPG's armor parser. Impact A remote attacker could entice a user or automated system to process a specially crafted signature file,...
GLSA-202512-01 : GnuPG: Arbitrary Code Execution
The remote host is affected by the vulnerability described in GLSA-202512-01 GnuPG: Arbitrary Code Execution A vulnerability has been discovered in GnuPG's armor parser. Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory. Note that Nessus has no...
EUVD-2019-6355
Malware in sbrugna...
EUVD-2009-2445
Malware in sbrugna...
EUVD-2007-4948
Malware in sbrugna...
EUVD-2001-0265
Malware in sbrugna...
EUVD-2018-6756
Malware in sbrugna...
EUVD-2018-6812
Malware in sbrugna...
EUVD-2021-33930
Malicious code in bioql PyPI...
EUVD-2022-5700
Malicious code in bioql PyPI...
EUVD-2021-33931
Malicious code in bioql PyPI...
EUVD-2025-29425
Malicious code in bioql PyPI...