Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GnuPG 安全漏洞
Vulnerability Description
GnuPG是GNU计划的一套开源的加密软件，采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。 GnuPG 2.2.21版本和2.2.22版本以及Gpg4win 3.1.12版本存在安全漏洞，该漏洞源于g10/key check.c错误，攻击者借助该漏洞会导致系统崩溃。
CVSS Information
N/A
Vulnerability Type
N/A