gnupg: memory access violations [LWN.net]

Package(s):

gnupg

CVE #(s):

CVE-2012-6085

Created:

January 2, 2013

Updated:

June 11, 2013

Description:

From the Mandriva advisory:

Versions of GnuPG <= 1.4.12 are vulnerable to memory access violations and public keyring database corruption when importing public keys that have been manipulated. An OpenPGP key can be fuzzed in such a way that gpg segfaults (or has other memory access violations) when importing the key.

Alerts:

Mandriva	MDVSA-2013:001	2013-01-02
Debian	DSA-2601-1	2013-01-06
Mageia	MGASA-2013-0003	2013-01-05
Ubuntu	USN-1682-1	2013-01-09
Fedora	FEDORA-2013-0258	2013-01-12
Fedora	FEDORA-2013-0459	2013-01-20
Fedora	FEDORA-2013-0477	2013-01-20
Fedora	FEDORA-2013-0222	2013-01-20
Mandriva	MDVSA-2013:001-1	2013-04-05
openSUSE	openSUSE-SU-2013:0849-1	2013-05-31
openSUSE	openSUSE-SU-2013:0880-1	2013-06-10
openSUSE	openSUSE-SU-2013:0957-1	2013-06-10

(Log in to post comments)