Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-3219
3.3
LOWCVSS v3
Published
February 23, 2023
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.
gpg/gnupg
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).all versionsNVD