GNU GNU Privacy Guard 1.2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:privacy_guard:1.2.2:*:*:*:*:*:*:*
part: a version: 1.2.2 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Privacy Guard (9a3678db-31d6-5a6b-9731-d81acc8d3ee5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/gnupg2 |
purl2cpe | 2026-06-01 10:11:56.475463 |
pkg:deb/ubuntu/gnupg2 |
purl2cpe | 2026-06-01 10:11:56.475464 |
pkg:github/gpg/gnupg |
purl2cpe | 2026-06-01 10:11:56.475466 |
pkg:gitlab/redhat/gnupg2 |
purl2cpe | 2026-06-01 10:11:56.475467 |
pkg:rpm/centos/gnupg2 |
purl2cpe | 2026-06-01 10:11:56.475468 |
pkg:rpm/fedora/gnupg2 |
purl2cpe | 2026-06-01 10:11:56.475470 |
pkg:rpm/opensuse/gnupg2 |
purl2cpe | 2026-06-01 10:11:56.475471 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-0455 |
vulnerable | 2026-06-08 04:48:53.934829 |
Details available
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify".
Published: 2006-02-15T22:00:00.000Z
Updated: 2024-08-07T16:34:14.838Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0049 |
vulnerable | 2026-06-08 04:48:45.805284 |
Details available
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.
Published: 2006-03-13T21:00:00.000Z
Updated: 2024-08-07T16:18:20.663Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0978 |
vulnerable | 2026-06-08 04:47:22.970386 |
Details available
Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval.
Published: 2003-12-10T05:00:00.000Z
Updated: 2024-08-08T02:12:35.414Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0971 |
vulnerable | 2026-06-08 04:47:22.946341 |
Details available
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
Published: 2003-12-02T05:00:00.000Z
Updated: 2024-08-08T02:12:35.614Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.