CVE-2015-1606

The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and…

published November 20, 2019

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and use-after-free) via a crafted keyring file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01924 · 79.7th percentile
Published
2019-11-20T18:30Z
EPSS history
Timeline
  • 20 NOV 18:30Z
    The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and…
    cvelistv5