| Package | Affected versions | Patched versions |
|---|---|---|
| gnupg | ≥ 2.5.13, < 2.5.17 | 2.5.17 |
| gpg4win | ≥ 5.0.0, < 5.0.1 | 5.0.1 |
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however, there is also memory corruption that could lead to remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free