Описание
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
A vulnerability was found in GnuPG. GnuPG can spin on a relatively small input by crafting a public key with thousands of signatures attached and compressed down to a few kilobytes. This issue can potentially cause a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | gnupg2 | Out of support scope | ||
| Red Hat Enterprise Linux 7 | gnupg2 | Out of support scope | ||
| Red Hat Enterprise Linux 8 | gnupg2 | Fix deferred | ||
| Red Hat Enterprise Linux 9 | gnupg2 | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
6.2 Medium
CVSS3
Связанные уязвимости
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
GnuPG can be made to spin on a relatively small input by (for example) ...
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
Уязвимость программы для шифрования информации и создания электронных цифровых подписей GnuPG, связанная с записью за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.2 Medium
CVSS3