Red Hat Enterprise Linux 5/gnupg2

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
gnupg: infinite loop when decompressing data packetsCVE-2014-4617	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Medium	No fix reported	Not recorded
gnupg2: memcpy with overlapping ranges (keybox_search.c)CVE-2015-1607	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
gnupg2: invalid memory read using a garbled keyringCVE-2015-1606	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
libgcrypt: last-level cache side-channel attackCVE-2015-0837	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)CVE-2014-3591	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeysCVE-2018-9234	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Low	No fix reported	Not recorded
gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verificationCVE-2018-12020	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	High	No fix reported	Not recorded
GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoSCVE-2019-13050	Red Hat Enterprise Linux 5/gnupg2 Red Hat Enterprise Linux 5/gnupg	Red Hat	Medium	No fix reported	Not recorded