Security
فارسی
All products

Red Hat Enterprise Linux 5/gnupg

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
gnupg: infinite loop when decompressing data packetsCVE-2014-4617 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat Medium No fix reported
libgcrypt: ELGAMAL side-channel attackCVE-2014-5270 Red Hat Enterprise Linux 5/gnupgRed Hat Enterprise Linux 5/libgcrypt Red Hat Medium No fix reported
gnupg2: memcpy with overlapping ranges (keybox_search.c)CVE-2015-1607 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat Low No fix reported
gnupg2: invalid memory read using a garbled keyringCVE-2015-1606 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat Low No fix reported
libgcrypt: last-level cache side-channel attackCVE-2015-0837 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat Low No fix reported
libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)CVE-2014-3591 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat Low No fix reported
GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeysCVE-2018-9234 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat Low No fix reported
gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verificationCVE-2018-12020 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat High No fix reported
GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoSCVE-2019-13050 Red Hat Enterprise Linux 5/gnupg2Red Hat Enterprise Linux 5/gnupg Red Hat Medium No fix reported
gnupg2: OpenPGP Key Certification Forgeries with SHA-1CVE-2019-14855 Red Hat Enterprise Linux 5/gnupg Red Hat Low No fix reported