Lucene search
Ubuntu.comUB:CVE-2014-3564HistoryAug 01, 2014 - 12:00 a.m.
CVE-2014-3564
2014-08-0100:00:00
ubuntu.com
ubuntu.com
12
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.036
Percentile
91.6%
Multiple heap-based buffer overflows in the status_handler function in (1)
engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote
attackers to cause a denial of service (crash) and possibly execute
arbitrary code via vectors related to “different line lengths in a specific
order.”
Bugs
Related
securityvulns
securityvulns
GnuPG Made Easy memory corruption
2014-08-11 00:00:00
[USN-2307-1] GPGME vulnerability
2014-08-11 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1073-1)
2021-06-09 00:00:00
Huawei EulerOS: Security Advisory for gpgme (EulerOS-SA-2019-2125)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for gpgme (EulerOS-SA-2020-1254)
2020-03-13 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : GPGME vulnerability (USN-2307-1)
2014-08-07 00:00:00
EulerOS 2.0 SP2 : gpgme (EulerOS-SA-2019-2406)
2019-12-10 00:00:00
EulerOS Virtualization 3.0.2.2 : gpgme (EulerOS-SA-2020-1494)
2020-04-16 00:00:00
freebsd
freebsd
gpgme -- heap-based buffer overflow in gpgsm status handler
2014-06-25 00:00:00
debian
debian
[SECURITY] [DSA 3005-1] gpgme1.0 security update
2014-08-14 12:29:52
[DLA 39-1] gpgme1.0 security update
2014-08-20 18:35:24
[SECURITY] [DSA 3005-1] gpgme1.0 security update
2014-08-14 12:29:52
cvelist
cvelist
CVE-2014-3564
2014-10-20 17:00:00
osv
osv
gpgme1.0 - security update
2014-08-14 00:00:00
prion
prion
Heap overflow
2014-10-20 17:55:00
fedora
fedora
[SECURITY] Fedora 21 Update: gpgme-1.4.3-5.fc21
2014-12-22 02:37:49
[SECURITY] Fedora 20 Update: gpgme-1.3.2-5.fc20
2014-12-27 09:25:12
nvd
nvd
CVE-2014-3564
2014-10-20 17:55:05
debiancve
debiancve
CVE-2014-3564
2014-10-20 17:55:05
ubuntu
ubuntu
GPGME vulnerability
2014-08-06 00:00:00
mageia
mageia
Updated gpgme packages fix CVE-2014-3564
2014-08-21 13:36:13
amazon
amazon
Low: gpgme
2015-04-01 13:32:00
cve
cve
CVE-2014-3564
2014-10-20 17:55:05
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.036
Percentile
91.6%
Related for UB:CVE-2014-3564