PT-2013-1173 · Gnu+3 · Gnupg+3
Ratul Gupta
·
Publicado
2013-10-09
·
Atualizado
2024-06-15
·
CVE-2013-4351
CVSS v2.0
5.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
GnuPG versions 1.4.x through 2.1.x
Description
The issue allows remote attackers to bypass intended cryptographic protection mechanisms by leveraging a subkey with all bits cleared in a key flags subpacket, which is treated as if all bits are set. This might lead to a violation of the integrity and availability of protected information. The exploitation of this issue can be done remotely.
Recommendations
For GnuPG versions 1.4.x through 2.1.x, update to a version that fixes this issue to prevent exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Gnupg
Red Hat
Suse