1027 matches found
DEBIAN-CVE-2015-1607
kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...
CVE-2015-1606
The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...
DEBIAN-CVE-2015-1606
The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...
Design/Logic Flaw
The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...
Design/Logic Flaw
kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...
CVE-2015-1607
kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service invalid read operation via a crafted keyring file, related to sign extensions and "memcpy with overlappi...
CVE-2015-1607
Technical details of CVE-2015-1607 are not provided in the connected documents. The Initial Description mentions GNUPG but lacks vendor/product/version specifics beyond that. Monitor for updates.
CVE-2015-1606
The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...
CVE-2015-1606
The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...
CVE-2015-1606
Technical details for CVE-2015-1606 are not publicly provided in the connected documents. The batch includes unrelated CVEs and generic notes, but no vendor/product/version/root-cause/impact specific to this CVE. Monitor for official updates and disclosures.
CVE-2012-5577
Python keyring lib before 0.10 created keyring files with world-readable permissions...
DEBIAN-CVE-2012-5577
Python keyring lib before 0.10 created keyring files with world-readable permissions...
CVE-2012-5577
Python keyring lib before 0.10 created keyring files with world-readable permissions...
PYSEC-2019-181
Python keyring lib before 0.10 created keyring files with world-readable permissions...
Code injection
Python keyring lib before 0.10 created keyring files with world-readable permissions...
CVE-2012-5577
Python keyring lib before 0.10 created keyring files with world-readable permissions...
PYSEC-2019-181
Python keyring lib before 0.10 created keyring files with world-readable permissions...
CVE-2012-5577
Python keyring lib before 0.10 created keyring files with world-readable permissions...
CVE-2012-5577
CVE-2012-5577 affects the Python keyring library prior to 0.10, where keyring files were created with world-readable permissions. This is the concrete detail available across the connected sources; no additional exploit vectors, systems, or remediation steps are specified in the provided document...