CVE-2019-14855

Mô tả

Tham khảo

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• dev.gnupg.org/T4755 · Vendor Advisory
• lists.gnupg.org/pipermail/gnupg-announce/2019q4/000442.html · Mailing List
• rwc.iacr.org/2020/slides/Leurent.pdf · Exploit
• usn.ubuntu.com/4516-1 · Third Party Advisory

Lỗ hổng khác của gnupg

• CVE-2026-24883TRUNG BÌNH 5.5In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leadin…
• CVE-2026-24882CAO 7.8In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and E…
• CVE-2026-24881NGHIÊM TRỌNG 9.8In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffe…
• CVE-2025-68973CAO 7.0In GnuPG before 2.4.9, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bound…
• CVE-2025-68972TRUNG BÌNH 4.7In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places…