Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GnuPG 安全漏洞
Vulnerability Description
GnuPG是美国GNU社区的一套开源的加密软件，采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。 GnuPG 1.4.2.1之前版本存在安全漏洞。攻击者利用该漏洞使用 gpgv 的程序假定签名验证成功。
CVSS Information
N/A
Vulnerability Type
N/A