PT-2023-33848

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue concerns a memory leakage in the keyring allocation error path. It was introduced in version v4.12 and fixed in version v6.0.16. The actual impact and attack plausibility have not ye...

PT-2023-34548

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns a memory leakage in the keyring allocation error path. It was introduced in version v4.12 and fixed in version v5.10.163. The actual impact and attack plausibility have no...

PT-2023-34245

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue concerns a memory leakage in the keyring allocation error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

GSD-2022-1008097 fscrypt: fix keyring memory leak on mount failure

fscrypt: fix keyring memory leak on mount failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

GSD-2022-1007978 fscrypt: fix keyring memory leak on mount failure

fscrypt: fix keyring memory leak on mount failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

GSD-2022-1007830 fscrypt: fix keyring memory leak on mount failure

fscrypt: fix keyring memory leak on mount failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36085 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: A memory leak issue was discovered in the fscrypt keyring on mount failure. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-36352

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.154 Description A keyring memory leak occurs on mount failure. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.154, update to...

PT-2025-38343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the keyring allocation error path within the Linux kernel. Specifically, when keyring allocation fails during the integrity init keyring function, the...

Keybase open-source keyring client Windows Code Execution

The vulnerability of Keybase’s open-source keyring for Windows relates to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

OESA-2022-1847 gnupg2 security update

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 also known as PGP. GnuPG enables encryption and signing of data and communication, and features a versatile key management system as well as access modules for public key directories. Security Fixes: GnuPG...

GnuPG through 2.3.6 in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g. use of GPGME) are met allows signature forgery via injection into the status line.

...

Signature Forgery

gnupg2 is vulnerable to signature forgery. The vulnerability exists when an attacker possesses any secret-key information from a victim’s keyring and other constraints are met causing a forgery...

DEBIAN-CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME are met, allows signature forgery via injection into the status line...

GnuPG injection vulnerability

GnuPG is a suite of open source cryptographic software from the GNU community under the GNU General Public License. The software supports public key, symmetric encryption, hashing, and other algorithms. Versions of GnuPG prior to 2.3.6 suffer from an injection vulnerability that stems from an...

Malicious Package

Overview th-simple-keyring is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in th-simple-keyring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423113b750b113812f093f41e24a53d7cb2523615dfc6283d4011dcb7b7cd32a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6544 Malicious code in th-simple-keyring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 423113b750b113812f093f41e24a53d7cb2523615dfc6283d4011dcb7b7cd32a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: gnome-keyring

An update is available for gnome-keyring. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Python Keyring does not securely initialize encryption cipher

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack...