Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slackware mirror sites or man-in-the-middle attackers to cause a denial of service (data inconsistency) or possibly install Trojan horse packages via malformed gpg signatures.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SlackRoll 8 拒绝服务攻击漏洞
Vulnerability Description
SlackRoll 8之前版本接受gpg存在代码为有效签名证据而不是0和1。远程Slackware mirror站点或中间人攻击者可以借助畸形的gpg签名，引起拒绝服务攻击(数据矛盾)或安装特洛伊木马信息包。
CVSS Information
N/A
Vulnerability Type
N/A