GnuPG vulnerability

2013-01-0900:00:00

ubuntu.com

6.4 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.05 Low

EPSS

Percentile

92.8%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10
Ubuntu 10.04
Ubuntu 8.04

Packages

gnupg - GNU privacy guard - a free PGP replacement
gnupg2 - GNU privacy guard - a free PGP replacement

Details

KB Sriram discovered that GnuPG incorrectly handled certain malformed keys.
If a user or automated system were tricked into importing a malformed key,
the GnuPG keyring could become corrupted.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchgnupg< 1.4.6-2ubuntu5.2UNKNOWN
Ubuntu8.04noarchgnupg-udeb< 1.4.6-2ubuntu5.2UNKNOWN
Ubuntu8.04noarchgpgv< 1.4.6-2ubuntu5.2UNKNOWN
Ubuntu8.04noarchgpgv-udeb< 1.4.6-2ubuntu5.2UNKNOWN
Ubuntu12.10noarchgnupg2< 2.0.17-2ubuntu3.1UNKNOWN
Ubuntu12.10noarchgnupg-agent< 2.0.17-2ubuntu3.1UNKNOWN
Ubuntu12.10noarchgpgsm< 2.0.17-2ubuntu3.1UNKNOWN
Ubuntu12.10noarchgnupg< 1.4.11-3ubuntu4.1UNKNOWN
Ubuntu12.10noarchgnupg-curl< 1.4.11-3ubuntu4.1UNKNOWN
Ubuntu12.10noarchgnupg-udeb< 1.4.11-3ubuntu4.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	gnupg	< 1.4.6-2ubuntu5.2	UNKNOWN
Ubuntu	8.04	noarch	gnupg-udeb	< 1.4.6-2ubuntu5.2	UNKNOWN
Ubuntu	8.04	noarch	gpgv	< 1.4.6-2ubuntu5.2	UNKNOWN
Ubuntu	8.04	noarch	gpgv-udeb	< 1.4.6-2ubuntu5.2	UNKNOWN
Ubuntu	12.10	noarch	gnupg2	< 2.0.17-2ubuntu3.1	UNKNOWN
Ubuntu	12.10	noarch	gnupg-agent	< 2.0.17-2ubuntu3.1	UNKNOWN
Ubuntu	12.10	noarch	gpgsm	< 2.0.17-2ubuntu3.1	UNKNOWN
Ubuntu	12.10	noarch	gnupg	< 1.4.11-3ubuntu4.1	UNKNOWN
Ubuntu	12.10	noarch	gnupg-curl	< 1.4.11-3ubuntu4.1	UNKNOWN
Ubuntu	12.10	noarch	gnupg-udeb	< 1.4.11-3ubuntu4.1	UNKNOWN