Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L
Vulnerability Type
对因果或异常条件的不恰当检查
Vulnerability Title
GnuPG 安全漏洞
Vulnerability Description
GnuPG是美国GNU社区的一套开源的加密软件,采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。 GnuPG 2.5.5之前版本存在安全漏洞,该漏洞源于导入特定子密钥数据可能导致验证签名失败。
CVSS Information
N/A
Vulnerability Type
N/A