Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:privacy_guard:1.4.2.1:*:*:*:*:*:*:*

part: a version: 1.4.2.1 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductPrivacy Guard (9a3678db-31d6-5a6b-9731-d81acc8d3ee5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gnupg2 purl2cpe 2026-06-01 10:11:56.484516
pkg:deb/ubuntu/gnupg2 purl2cpe 2026-06-01 10:11:56.484518
pkg:github/gpg/gnupg purl2cpe 2026-06-01 10:11:56.484519
pkg:gitlab/redhat/gnupg2 purl2cpe 2026-06-01 10:11:56.484520
pkg:rpm/centos/gnupg2 purl2cpe 2026-06-01 10:11:56.484522
pkg:rpm/fedora/gnupg2 purl2cpe 2026-06-01 10:11:56.484523
pkg:rpm/opensuse/gnupg2 purl2cpe 2026-06-01 10:11:56.484524

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6235 vulnerable 2026-06-08 04:49:22.342991 Details available
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.
Published: 2006-12-07T11:00:00.000Z
Updated: 2024-08-07T20:19:35.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0049 vulnerable 2026-06-08 04:48:45.811293 Details available
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different vulnerability than CVE-2006-0455.
Published: 2006-03-13T21:00:00.000Z
Updated: 2024-08-07T16:18:20.663Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.