Search for packages
| purl | pkg:deb/debian/gnupg2@2.0.25-1~bpo70%2B1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3jt3-2y11-yuc5
Aliases: CVE-2015-1606 |
security update |
Affected by 6 other vulnerabilities. |
|
VCID-9cm4-mu3q-2yey
Aliases: CVE-2018-12020 |
security update |
Affected by 6 other vulnerabilities. Affected by 6 other vulnerabilities. Affected by 3 other vulnerabilities. |
|
VCID-9jj4-5uem-kkbs
Aliases: CVE-2022-34903 |
Multiple vulnerabilities have been discovered in GnuPG, the worst of which could lead to signature spoofing. |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-ba35-1hmw-m3hg
Aliases: CVE-2018-9234 |
GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys |
Affected by 3 other vulnerabilities. |
|
VCID-nfzs-w4pe-bubj
Aliases: CVE-2015-1607 |
gnupg2: memcpy with overlapping ranges (keybox_search.c) |
Affected by 6 other vulnerabilities. |
|
VCID-ng6k-ru7r-9kdp
Aliases: CVE-2025-68973 |
GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write |
Affected by 1 other vulnerability. |
|
VCID-qapz-hmnm-x7dd
Aliases: CVE-2018-1000858 |
gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service |
Affected by 3 other vulnerabilities. |
|
VCID-rqt5-xvxx-47h6
Aliases: CVE-2019-14855 |
gnupg2: OpenPGP Key Certification Forgeries with SHA-1 |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-mhw6-1d6f-pbcp | A vulnerability in GnuPG can lead to a Denial of Service condition. |
CVE-2014-4617
|
| VCID-vmyv-5rvk-akh3 | Multiple vulnerabilities have been discovered in GnuPG and Libgcrypt, which may result in execution of arbitrary code, Denial of Service, or the disclosure of private keys. |
CVE-2013-4351
|
| VCID-zytz-gsnc-yqh9 | Multiple vulnerabilities have been discovered in GnuPG and Libgcrypt, which may result in execution of arbitrary code, Denial of Service, or the disclosure of private keys. |
CVE-2013-4402
|