Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GnuPG 安全漏洞
Vulnerability Description
GnuPG（GNU Privacy Guard）是GNU计划开发的一套开源的加密软件，采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。 GnuPG 2.2.4版本和2.2.5版本中存在安全漏洞，该漏洞源于程序没有强制执行配置。攻击者可利用该漏洞绕过安全限制。
CVSS Information
N/A
Vulnerability Type
N/A