Описание
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gnupg2 | fixed | 2.4.9-2 | experimental | package |
| gnupg2 | fixed | 2.4.9-4 | package | |
| gnupg2 | no-dsa | trixie | package | |
| gnupg2 | not-affected | bookworm | package | |
| gnupg2 | not-affected | bullseye | package |
Примечания
https://dev.gnupg.org/T8045
Introduced after: https://github.com/gpg/gnupg/commit/62a7854816b8f3661fb41f05463289e5b96663ee (Beta-2.3.0-beta1655)
Связанные уязвимости
CVSS3: 8.4
ubuntu
8 месяцев назад
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
CVSS3: 8.4
redhat
8 месяцев назад
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
CVSS3: 8.4
nvd
8 месяцев назад
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
