Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.17 views

RHEL 5 : gnupg2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gnupg2: OpenPGP Key Certification Forgeries with SHA-1 CVE-2019-14855 - mainproc.c in GnuPG before 2.2.8...

8.4AI score0.08654EPSS
Exploits1References2
F5 Networks
F5 Networks
added 2023/02/21 6:34 p.m.58 views

K55121327: GnuPG vulnerability CVE-2018-12020

Security Advisory Description mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example,...

7.5CVSS7AI score0.08654EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/03/08 12:0 a.m.31 views

EulerOS Virtualization 2.5.2 : gnupg2 (EulerOS-SA-2019-1077)

According to the version of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote...

7.5CVSS7AI score0.08654EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.1 views

The vulnerability of the mainproc.c process in the information encryption and electronic digital signature creation software of GNU Privacy Guard allows a perpetrator to compromise the integrity of the protected information.

The vulnerability in the mainproc.c process of the GNU Privacy Guard’s information encryption and digital signatures generation function is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected...

7.8CVSS7.3AI score0.08654EPSS
Exploits0References9Affected Software5
NVD
NVD
added 2018/06/08 9:29 p.m.35 views

CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS7.6AI score0.08654EPSS
Exploits0References21
Debian CVE
Debian CVE
added 2018/06/08 9:0 p.m.35 views

CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS7.2AI score0.08654EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2018/06/08 9:0 p.m.30 views

CVE-2018-12020

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represen...

7.5CVSS8.1AI score0.08654EPSS
Exploits0
Rows per page
Query Builder