Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-6085
HistoryJan 24, 2013 - 1:55 a.m.

CVE-2012-6085

2013-01-2401:55:03
CWE-20
[email protected]
web.nvd.nist.gov
10

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.048

Percentile

92.8%

JSON

The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet.

Affected configurations

Nvd
Node
gnupggnupgMatch1.4.0
OR
gnupggnupgMatch1.4.2
OR
gnupggnupgMatch1.4.3
OR
gnupggnupgMatch1.4.4
OR
gnupggnupgMatch1.4.5
OR
gnupggnupgMatch1.4.8
OR
gnupggnupgMatch1.4.10
OR
gnupggnupgMatch1.4.11
OR
gnupggnupgMatch1.4.12
Node
gnupggnupgMatch2.0
OR
gnupggnupgMatch2.0.1
OR
gnupggnupgMatch2.0.3
OR
gnupggnupgMatch2.0.4
OR
gnupggnupgMatch2.0.5
OR
gnupggnupgMatch2.0.6
OR
gnupggnupgMatch2.0.7
OR
gnupggnupgMatch2.0.8
OR
gnupggnupgMatch2.0.10
OR
gnupggnupgMatch2.0.11
OR
gnupggnupgMatch2.0.12
OR
gnupggnupgMatch2.0.13
OR
gnupggnupgMatch2.0.14
OR
gnupggnupgMatch2.0.15
OR
gnupggnupgMatch2.0.16
OR
gnupggnupgMatch2.0.17
OR
gnupggnupgMatch2.0.18
OR
gnupggnupgMatch2.0.19
VendorProductVersionCPE
gnupggnupg1.4.0cpe:2.3:a:gnupg:gnupg:1.4.0:*:*:*:*:*:*:*
gnupggnupg1.4.2cpe:2.3:a:gnupg:gnupg:1.4.2:*:*:*:*:*:*:*
gnupggnupg1.4.3cpe:2.3:a:gnupg:gnupg:1.4.3:*:*:*:*:*:*:*
gnupggnupg1.4.4cpe:2.3:a:gnupg:gnupg:1.4.4:*:*:*:*:*:*:*
gnupggnupg1.4.5cpe:2.3:a:gnupg:gnupg:1.4.5:*:*:*:*:*:*:*
gnupggnupg1.4.8cpe:2.3:a:gnupg:gnupg:1.4.8:*:*:*:*:*:*:*
gnupggnupg1.4.10cpe:2.3:a:gnupg:gnupg:1.4.10:*:*:*:*:*:*:*
gnupggnupg1.4.11cpe:2.3:a:gnupg:gnupg:1.4.11:*:*:*:*:*:*:*
gnupggnupg1.4.12cpe:2.3:a:gnupg:gnupg:1.4.12:*:*:*:*:*:*:*
gnupggnupg2.0cpe:2.3:a:gnupg:gnupg:2.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 271

Related

openvas 38
nessus 27
fedora 6
ubuntu 1
securityvulns 2
ubuntucve 1
cve 1
prion 1
debian 1
cvelist 1
f5 2
veracode 3
debiancve 1
osv 1
oraclelinux 2
redhat 2
centos 2
gentoo 1
openvas
openvas
F5 BIG-IP - GnuPG vulnerability CVE-2012-6085
2016-02-23 00:00:00
Debian Security Advisory DSA 2601-1 (gnupg, gnupg2 - missing input sanitation)
2013-01-06 00:00:00
Fedora Update for gnupg FEDORA-2013-0377
2013-01-21 00:00:00
nessus
nessus
Fedora 16 : gnupg2-2.0.19-7.fc16 (2013-0222)
2013-01-21 00:00:00
Fedora 16 : gnupg-1.4.13-2.fc16 (2013-0477)
2013-01-21 00:00:00
Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : gnupg, gnupg2 vulnerability (USN-1682-1)
2013-01-10 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: gnupg2-2.0.19-7.fc16
2013-01-20 02:58:52
[SECURITY] Fedora 18 Update: gnupg-1.4.13-2.fc18
2013-01-10 03:09:49
[SECURITY] Fedora 17 Update: gnupg2-2.0.19-7.fc17
2013-01-12 15:23:52
ubuntu
ubuntu
GnuPG vulnerability
2013-01-09 00:00:00
securityvulns
securityvulns
GnuPG memory corruption
2013-01-02 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
ubuntucve
ubuntucve
CVE-2012-6085
2012-12-31 00:00:00
cve
cve
CVE-2012-6085
2013-01-24 01:55:03
prion
prion
Design/Logic Flaw
2013-01-24 01:55:00
debian
debian
[SECURITY] [DSA 2601-1] gnupg, gnupg2 security update
2013-01-06 18:04:57
cvelist
cvelist
CVE-2012-6085
2013-01-24 01:00:00
f5
f5
SOL11785283 - GnuPG vulnerability CVE-2012-6085
2016-02-19 00:00:00
K11785283 : GnuPG vulnerability CVE-2012-6085
2016-02-19 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:00:59
Information Disclosure
2019-05-02 04:56:46
Denial Of Service (DOS)
2019-05-02 04:56:46
debiancve
debiancve
CVE-2012-6085
2013-01-24 01:55:03
osv
osv
gnupg - missing input sanitation
2013-01-06 00:00:00
oraclelinux
oraclelinux
gnupg2 security update
2013-10-24 00:00:00
gnupg security update
2013-10-24 00:00:00
redhat
redhat
(RHSA-2013:1459) Moderate: gnupg2 security update
2013-10-24 00:00:00
(RHSA-2013:1458) Moderate: gnupg security update
2013-10-24 00:00:00
centos
centos
gnupg2 security update
2013-10-24 16:06:44
gnupg security update
2013-10-25 14:00:34
gentoo
gentoo
GnuPG, Libgcrypt: Multiple vulnerabilities
2014-02-21 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.048

Percentile

92.8%

JSON
Related for NVD:CVE-2012-6085
openvas38nessus27fedora6ubuntu1securityvulns2ubuntucve1cve1prion1debian1cvelist1f52veracode3debiancve1osv1oraclelinux2redhat2centos2gentoo1