GPGME vulnerability

2014-08-0600:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

Low

EPSS

0.036

Percentile

91.6%

JSON

Releases

Ubuntu 14.04 ESM
Ubuntu 12.04
Ubuntu 10.04

Packages

gpgme1.0 - GPGME - GnuPG Made Easy

Details

Tomáš Trnka discovered that GPGME incorrectly handled certain certificate
line lengths. An attacker could use this issue to cause applications using
GPGME to crash, resulting in a denial of service, or possibly execute
arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchlibgpgme11< 1.4.3-0.1ubuntu5.1UNKNOWN
Ubuntu14.04noarchlibgpgme11-dev< 1.4.3-0.1ubuntu5.1UNKNOWN
Ubuntu12.04noarchlibgpgme11< 1.2.0-1.4ubuntu2.1UNKNOWN
Ubuntu12.04noarchlibgpgme11-dev< 1.2.0-1.4ubuntu2.1UNKNOWN
Ubuntu10.04noarchlibgpgme11< 1.2.0-1.2ubuntu1.1UNKNOWN
Ubuntu10.04noarchlibgpgme11-dev< 1.2.0-1.2ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	libgpgme11	< 1.4.3-0.1ubuntu5.1	UNKNOWN
Ubuntu	14.04	noarch	libgpgme11-dev	< 1.4.3-0.1ubuntu5.1	UNKNOWN
Ubuntu	12.04	noarch	libgpgme11	< 1.2.0-1.4ubuntu2.1	UNKNOWN
Ubuntu	12.04	noarch	libgpgme11-dev	< 1.2.0-1.4ubuntu2.1	UNKNOWN
Ubuntu	10.04	noarch	libgpgme11	< 1.2.0-1.2ubuntu1.1	UNKNOWN
Ubuntu	10.04	noarch	libgpgme11-dev	< 1.2.0-1.2ubuntu1.1	UNKNOWN