CVE-2015-1606

概要

参考情報

• git.gnupg.org/cgi-bin/gitweb.cgi
• debian.org/security/2015/dsa-3184 · Third Party Advisory
• openwall.com/lists/oss-security/2015/02/13/14 · Mailing List
• openwall.com/lists/oss-security/2015/02/14/6 · Mailing List
• securitytracker.com/id/1031876 · Third Party Advisory
• blog.fuzzing-project.org/5-Multiple-issues-in-GnuPG-found-through-keyring-fuzzing-TFPA-0012015.html · Third Party Advisory

gnupg のその他の脆弱性

• CVE-2026-24883中 5.5In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leadin…
• CVE-2026-24882高 7.8In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and E…
• CVE-2026-24881緊急 9.8In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffe…
• CVE-2025-68973高 7.0In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bound…
• CVE-2025-68972中 4.7In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places…