CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of…

published July 1, 2022

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02844 · 86.6th percentile
Published
2022-07-01T21:05Z
EPSS history
Timeline
  • 01 JUL 21:05Z
    GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of…
    cvelistv5