Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1530
HistoryMar 27, 2008 - 12:00 a.m.

CVE-2008-1530

2008-03-2700:00:00
ubuntu.com
ubuntu.com
5

0.04 Low

EPSS

Percentile

92.0%

GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via crafted duplicate
keys that are imported from key servers, which triggers “memory corruption
around deduplication of user IDs.”

Bugs

Notes

Author Note
jdstrand verified all ubuntu releases not affected (amd64 kvm) upcoming 1.4.9 and 2.0.9 will have fix

0.04 Low

EPSS

Percentile

92.0%