oss-sec mailing list archives
CVE request: GnuPG Import Key Memory Corruption
From: Robert Buchholz <rbu () gentoo org>
Date: Thu, 27 Mar 2008 01:58:40 +0100
Hi, there's a memory corruption triggered when importing malformed keys using GnuPG 1.4.8 and 2.0.8. Prior and later versions are not affected. Exploitability to execute code is unknown. References: http://www.ocert.org/advisories/ocert-2008-1.html https://bugs.g10code.com/gnupg/issue894 https://bugs.gentoo.org/show_bug.cgi?id=214990 Thanks, Robert
Attachment:
signature.asc
Description: This is a digitally signed message part.
Current thread:
- CVE request: GnuPG Import Key Memory Corruption Robert Buchholz (Mar 26)
- Re: CVE request: GnuPG Import Key Memory Corruption Steven M. Christey (Mar 27)