Lucene search
F5F5:K11785283HistoryFeb 19, 2016 - 12:00 a.m.
K11785283 : GnuPG vulnerability CVE-2012-6085
2016-02-1900:00:00
my.f5.com
20
Security Advisory Description
The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet. (CVE-2012-6085)
Impact
A remote attacker may exploit this vulnerability by way of a specially crafted OpenPGP packet to cause the keyring to be corrupted.
Note: This is only used directly in verification of ISOs and ASM signatures, which does open up some risk, but only during the verification process.
Related
openvas
openvas
F5 BIG-IP - GnuPG vulnerability CVE-2012-6085
2016-02-23 00:00:00
Fedora Update for gnupg FEDORA-2013-0377
2013-01-21 00:00:00
nessus
nessus
Fedora 16 : gnupg2-2.0.19-7.fc16 (2013-0222)
2013-01-21 00:00:00
Fedora 16 : gnupg-1.4.13-2.fc16 (2013-0477)
2013-01-21 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: gnupg2-2.0.19-7.fc16
2013-01-20 02:58:52
[SECURITY] Fedora 18 Update: gnupg-1.4.13-2.fc18
2013-01-10 03:09:49
[SECURITY] Fedora 17 Update: gnupg2-2.0.19-7.fc17
2013-01-12 15:23:52
ubuntu
ubuntu
GnuPG vulnerability
2013-01-09 00:00:00
securityvulns
securityvulns
GnuPG memory corruption
2013-01-02 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
ubuntucve
ubuntucve
CVE-2012-6085
2012-12-31 00:00:00
cve
cve
CVE-2012-6085
2013-01-24 01:55:03
prion
prion
Design/Logic Flaw
2013-01-24 01:55:00
debian
debian
[SECURITY] [DSA 2601-1] gnupg, gnupg2 security update
2013-01-06 18:04:57
cvelist
cvelist
CVE-2012-6085
2013-01-24 01:00:00
nvd
nvd
CVE-2012-6085
2013-01-24 01:55:03
f5
f5
SOL11785283 - GnuPG vulnerability CVE-2012-6085
2016-02-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:00:59
Information Disclosure
2019-05-02 04:56:46
Denial Of Service (DOS)
2019-05-02 04:56:46
debiancve
debiancve
CVE-2012-6085
2013-01-24 01:55:03
osv
osv
gnupg - missing input sanitation
2013-01-06 00:00:00
oraclelinux
oraclelinux
gnupg2 security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
redhat
redhat
(RHSA-2013:1459) Moderate: gnupg2 security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
centos
centos
gnupg2 security update
2013-10-24 16:06:44
gnupg security update
2013-10-25 14:00:34
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00