CVE-2020-8945

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

published February 12, 2020

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05071 · 92.3th percentile
Published
2020-02-12T17:20Z
EPSS history
Timeline
  • 12 FEB 17:20Z
    The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O
    cvelistv5