Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-13050
7.5
HIGHCVSS v3
Published
June 29, 2019
CVSS v2
5 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
Docker Hub
gpg/gnupg
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).<= 2.2.16NVD
Crates.io
NPM
RubyGems