Gnupg Luki w zabezpieczeniach

Oś czasu

Wersja

2.0.88
1.4.06
1.4.26
1.4.36
1.4.46

Przeciwdziałanie

Official Fix32
Temporary Fix0
Workaround0
Unavailable0
Not Defined10

Wykorzystywanie

High0
Functional0
Proof-of-Concept14
Unproven2
Not Defined26

Wektor dostępu

Not Defined0
Physical2
Local4
Adjacent2
Network34

Uwierzytelnianie

Not Defined0
High0
Low2
None40

Interakcja z użytkownikiem

Not Defined0
Required4
None38

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤616
≤74
≤816
≤90
≤102

CVSSv3 Temp

≤10
≤20
≤32
≤40
≤510
≤68
≤712
≤88
≤92
≤100

VulDB

≤10
≤22
≤30
≤42
≤52
≤616
≤72
≤816
≤90
≤102

NVD

≤10
≤20
≤30
≤40
≤52
≤64
≤72
≤86
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k24
<5k10
<10k4
<25k2
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k42
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Versions (203): 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 0.4.3, 1, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.6, 1.3.9, 1.3.91, 1.3.92, 1.3.93, 1.4, 1.4.1, 1.4.2, 1.4.2.1, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.4.11, 1.4.12, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.17, 1.4.18, 1.5, 1.5.3, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.7, 1.7.1, 1.7.2, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8, 1.9.9, 1.9.11, 1.9.12, 1.9.13, 1.9.14, 1.9.15, 1.9.16, 1.9.17, 1.9.18, 1.9.19, 1.9.21, 1.9.22, 1.9.23, 1.9.24, 1.9.25, 1.9.26, 1.9.27, 1.9.28, 1.9.29, 1.9.31, 1.9.32, 1.9.33, 1.9.34, 1.9.35, 1.9.36, 1.9.37, 1.9.38, 1.9.39, 1.9.41, 1.9.42, 1.9.43, 1.9.44, 1.9.45, 1.9.46, 1.9.47, 1.9.48, 1.9.49, 1.9.51, 1.9.52, 1.9.53, 1.9.54, 1.9.55, 1.9.56, 1.9.57, 1.9.58, 1.9.59, 1.9.61, 1.9.62, 1.9.63, 1.9.64, 1.9.65, 1.9.66, 1.9.67, 1.9.68, 1.9.69, 1.9.71, 1.9.72, 1.9.73, 1.9.74, 1.9.75, 1.9.76, 1.9.77, 1.9.78, 1.9.79, 1.9.81, 1.9.82, 1.9.83, 1.9.84, 1.9.85, 1.9.86, 1.9.87, 1.9.88, 1.9.89, 1.9.91, 1.9.92, 1.9.93, 1.9.94, 1.9.95, 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.0.18, 2.0.19, 2.0.21, 2.0.22, 2.0.23, 2.0.24, 2.0.25, 2.0.26, 2.1, 2.1.1, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.2.8, 2.2.9, 2.2.11, 2.2.12, 2.2.13, 2.2.14, 2.2.15, 2.2.16, 2.2.17, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-02-244.54.5GnuPG Public Key denial of service$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-3219
2022-07-026.06.0GnuPG Status Line privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2022-34903
2020-09-036.46.1GnuPG/Gpg4win Key Import key-check.c Array Index memory corruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-25125
2020-03-205.25.1GnuPG SHA1 weak encryption$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2019-14855
2019-11-294.84.6Libgcrypt/GnuPG mpi_powm information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2015-0837
2019-11-293.13.0Libgcrypt/GnuPG Elgamal Decryption information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2014-3591
2019-11-205.95.8GnuPG Sign Extension keybox-search.c privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2015-1607
2019-11-206.46.3GnuPG Keyring DB memory corruption$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2015-1606
2019-03-216.56.5python-gnupg Passphrase privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2019-6690
2018-12-206.56.4GnuPG cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-1000858

32 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 32 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!