Vulnerability CVE-2022-34903
Published: 2022-07-01   Modified: 2022-07-02

Description:
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.

 References:
https://dev.gnupg.org/T6027
https://bugs.debian.org/1014157
https://www.openwall.com/lists/oss-security/2022/06/30/1
Copyright 2024, cxsecurity.com

 

Back to Top