İçeriğe atla
Noroxi

GnuPG kayıtları

gnupg üreticisine ait 55 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%92,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

55 kayıt
  • CVE-2026-24881
    40Planlayın

    In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffe

    KritikCVSS 9,8İstismar yokEPSS %2

    gnupg · gnupg27 Oca 2026

  • CVE-2022-3515
    39İzleyin

    A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser.

    KritikCVSS 9,8İstismar yokEPSS %2

    gnupg · libksba12 Oca 2023

  • CVE-2022-47629
    39İzleyin

    Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.

    KritikCVSS 9,8İstismar yokEPSS %2

    gnupg · libksba20 Ara 2022

  • CVE-2008-1530
    38İzleyin

    GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted dup

    KritikCVSS 9,3İstismar yokEPSS %4

    gnupg · gnupg27 Mar 2008

  • CVE-2018-1000858
    35İzleyin

    GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CS

    YüksekCVSS 8,8İstismar yokEPSS %1

    gnupg · gnupg20 Ara 2018

  • CVE-2010-2547
    34İzleyin

    Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service

    YüksekCVSS 8,1İstismar yokEPSS %5

    gnupg · gnupg5 Ağu 2010

  • CVE-2018-12020
    33İzleyin

    mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers

    YüksekCVSS 7,5İstismar yokEPSS %9

    gnupg · gnupg8 Haz 2018

  • CVE-2014-9087
    32İzleyin

    Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of se

    YüksekCVSS 7,5İstismar yokEPSS %6

    gnupg · libksba1 Ara 2014

  • CVE-2017-0379
    31İzleyin

    Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret

    YüksekCVSS 7,5İstismar yokEPSS %4

    gnupg · libgcrypt29 Ağu 2017

  • CVE-2016-4579
    31İzleyin

    Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to

    YüksekCVSS 7,5İstismar yokEPSS %3

    gnupg · libksba13 Haz 2016

  • CVE-2016-4356
    31İzleyin

    The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of

    YüksekCVSS 7,5İstismar yokEPSS %3

    gnupg · libksba13 Haz 2016

  • CVE-2016-4574
    31İzleyin

    Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denia

    YüksekCVSS 7,5İstismar yokEPSS %3

    gnupg · libksba13 Haz 2016

  • CVE-2019-13050
    31İzleyin

    Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a Gn

    YüksekCVSS 7,5İstismar yokEPSS %3

    gnupg · gnupg29 Haz 2019

  • CVE-2021-33560
    31İzleyin

    Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel att

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    gnupg · libgcrypt8 Haz 2021

  • CVE-2016-4353
    31İzleyin

    ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of s

    YüksekCVSS 7,5İstismar yokEPSS %2

    gnupg · libksba13 Haz 2016

  • CVE-2018-9234
    31İzleyin

    GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in a

    YüksekCVSS 7,5İstismar yokEPSS %2

    gnupg · gnupg3 Nis 2018

  • CVE-2016-4355
    31İzleyin

    Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted

    YüksekCVSS 7,5İstismar yokEPSS %2

    gnupg · libksba13 Haz 2016

  • CVE-2016-4354
    31İzleyin

    ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash

    YüksekCVSS 7,5İstismar yokEPSS %2

    canonical · ubuntu linux13 Haz 2016

  • CVE-2018-6829
    31İzleyin

    cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers t

    YüksekCVSS 7,5İstismar yokEPSS %2

    gnupg · libgcrypt7 Şub 2018

  • CVE-2020-25125
    31İzleyin

    GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim i

    YüksekCVSS 7,8İstismar yokEPSS %1

    gnupg · gnupg3 Eyl 2020

  • CVE-2021-3345
    31İzleyin

    _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    gnupg · libgcrypt29 Oca 2021

  • CVE-2026-24882
    31İzleyin

    In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and E

    YüksekCVSS 7,8İstismar yokEPSS %0

    gnupg · gnupg27 Oca 2026

  • CVE-2019-14855
    30İzleyin

    A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm.

    YüksekCVSS 7,5İstismar yokEPSS %1

    gnupg · gnupg20 Mar 2020

  • CVE-2017-7526
    28İzleyin

    libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left

    OrtaCVSS 6,8İstismar yokEPSS %4

    gnupg · libgcrypt26 Tem 2018

  • CVE-2006-6169
    28İzleyin

    Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might all

    OrtaCVSS 6,8İstismar yokEPSS %3

    gnupg · gnupg29 Kas 2006