Astra Linux – vulnerability in gnupg2

In GnuPG versions prior to 2.4.9, the armorfilter function in g10/armor.c contains two increments of an index variable where only one is intended; this results in an out-of-bounds write when crafted input is provided. For ExtendedLTS, versions 2.2.51 and later contain fixes...

SUSE CVE-2025-68973

In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. For ExtendedLTS, 2.2.51 and later are fixed versions...

CVE-2025-68973

CVE-2025-68973 affects GnuPG (gnupg2) through versions before 2.4.9. The issue is in armor_filter() in g10/armor.c where two increments of an index variable are not both intended, enabling an out-of-bounds write with crafted input. In practice, advisories describe potential information disclosure...

CVE-2025-68973

In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. For ExtendedLTS, 2.2.51 and later are fixed versions...

kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

A flaw was found in the Linux kernel. During processor cache detection on ARM64 systems featuring separate instruction and data caches, the kernel fails to properly account for cache entries against allocated array limits, resulting in an out-of-bounds memory write. A local attacker could leverag...

PT-2025-53659

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.4.9 GnuPG versions 2.2.51 and earlier Description The issue resides in the armor filter function within the g10/armor.c file. A flaw exists due to two increments of an index variable where only one is intended. This...

PT-2011-2786

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2002 SP3, 2003 SP3, and 2007 SP2 Office 2004 for Mac Excel Viewer version SP2 Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats version SP2 Description A stack-based buffer overflow issue allo...

DEBIAN-CVE-2004-1013

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...

CVE-2004-1013

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...

CVE-2004-1013

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...

CVE-2004-1013: Undefined Security Weakness

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...