CVE-2022-3219

ADVISORY - debian

Summary

GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.

gnupg2 (unimportant) https://bugzilla.redhat.com/show_bug.cgi?id=2127010 https://dev.gnupg.org/D556 https://dev.gnupg.org/T5993 https://www.openwall.com/lists/oss-security/2022/07/04/8 GnuPG upstream is not implementing this change.

EPSS Score⁠: 0.00293 (0.218)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-787⁠

Out-of-bounds Write

ADVISORY - redhat

CWE-787⁠

Out-of-bounds Write

Impacted images

Advisories

Debian

CREATED

4 years ago

UPDATED

14 days ago

ADVISORY IDCVE-2022-3219⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Package	Type	OS Name	OS Version	Affected Ranges	Fix Versions
debian/gnupg2	deb	debian	12	>0	Not yet available
debian/gnupg2	deb	debian	unstable	>0	Not yet available
debian/gnupg2	deb	debian	13	>0	Not yet available
debian/gnupg2	deb	debian	14	>0	Not yet available

Severity and metrics

No CVSS data available from this advisory.

NIST

CREATED

4 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2022-3219⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-787⁠

CVSS SCORE

3.3low

Ubuntu

CREATED

4 years ago

UPDATED

6 months ago

ADVISORY IDCVE-2022-3219⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

3.3low

Red Hat

CREATED

4 years ago

UPDATED

8 months ago

ADVISORY IDCVE-2022-3219⁠

EXPLOITABILITY SCORE

2.5

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-787⁠

CVSS SCORE

6.2low

Chainguard

CREATED

3 years ago

UPDATED

3 years ago

ADVISORY ID

CGA-qv69-x9jf-vm7x

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

8 months ago

UPDATED

8 months ago

ADVISORY ID

CGA-xvj9-cmh9-c48p

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY ID

MINI-25fw-j3qq-7cmf

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

1 year ago

UPDATED

1 year ago

ADVISORY ID

MINI-jj53-ppmj-hfm9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY