Search for packages
| purl | pkg:deb/debian/gnupg2@2.2.27-2%2Bdeb11u2?distro=trixie |
| Next non-vulnerable version | 2.2.27-2+deb11u3 |
| Latest non-vulnerable version | 2.4.8-5 |
| Risk | 1.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zx65-nc6s-8yf9
Aliases: CVE-2025-30258 |
gnupg: verification DoS due to a malicious subkey in the keyring |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3jt3-2y11-yuc5 | security update |
CVE-2015-1606
|
| VCID-3vdu-cchd-ekcp | gnupg/gpgme signed message spoofing |
CVE-2007-1263
|
| VCID-4fcw-qdwc-4ycd | security update |
CVE-2014-9087
|
| VCID-4jxu-65cg-gbag | security flaw |
CVE-2006-3082
|
| VCID-5tpu-zawb-f3as | Due to a design flaw, the output of GnuPG's Random Number Generator (RNG) is predictable. |
CVE-2016-6313
|
| VCID-79fy-gfr6-zkgq | GnuPG: GnuPG: Stack-based buffer overflow in tpm2daemon allows arbitrary code execution |
CVE-2026-24882
|
| VCID-9cm4-mu3q-2yey | security update |
CVE-2018-12020
|
| VCID-9jj4-5uem-kkbs | Multiple vulnerabilities have been discovered in GnuPG, the worst of which could lead to signature spoofing. |
CVE-2022-34903
|
| VCID-ba35-1hmw-m3hg | GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys |
CVE-2018-9234
|
| VCID-bfu8-pr4x-guek | gnupg: AEAD preference list overflow |
CVE-2020-25125
|
| VCID-bwr1-kgn5-27f7 | GnuPG may erroneously report a modified or unsigned message has a valid digital signature. |
CVE-2006-0049
|
| VCID-c2pw-ysyx-q7an | GnuPG is vulnerable to a buffer overflow and an erroneous function pointer dereference that can result in the execution of arbitrary code. |
CVE-2006-6235
|
| VCID-e1yx-b7wn-83af | gnupg NULL pointer dereference |
CVE-2008-1530
|
| VCID-j4gx-2342-mkdv | Applications relying on GnuPG to authenticate digital signatures may incorrectly believe a signature has been verified. |
CVE-2006-0455
|
| VCID-k6h1-5v39-jfeb | GnuPG: GnuPG: Remote code execution and denial of service via crafted CMS EnvelopedData message |
CVE-2026-24881
|
| VCID-mhw6-1d6f-pbcp | A vulnerability in GnuPG can lead to a Denial of Service condition. |
CVE-2014-4617
|
| VCID-n34c-87th-d7gz | The GPGSM utility included in GnuPG contains a use-after-free vulnerability that may allow an unauthenticated remote attacker to execute arbitrary code. |
CVE-2010-2547
|
| VCID-nfzs-w4pe-bubj | gnupg2: memcpy with overlapping ranges (keybox_search.c) |
CVE-2015-1607
|
| VCID-ng6k-ru7r-9kdp | GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write |
CVE-2025-68973
|
| VCID-qapz-hmnm-x7dd | gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service |
CVE-2018-1000858
|
| VCID-qeqa-7wwa-6qdn | The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail. |
CVE-2005-2023
|
| VCID-rqt5-xvxx-47h6 | gnupg2: OpenPGP Key Certification Forgeries with SHA-1 |
CVE-2019-14855
|
| VCID-sbp2-xwuf-wbgc | GnuPG: GnuPG: Denial of service due to specially crafted signature packet |
CVE-2026-24883
|
| VCID-st4p-dn2v-dbg3 | Multiple vulnerabilities have been discovered in GnuPG and Libgcrypt, which may result in execution of arbitrary code, Denial of Service, or the disclosure of private keys. |
CVE-2012-6085
|
| VCID-vmyv-5rvk-akh3 | Multiple vulnerabilities have been discovered in GnuPG and Libgcrypt, which may result in execution of arbitrary code, Denial of Service, or the disclosure of private keys. |
CVE-2013-4351
|
| VCID-xcyv-byj5-8fb3 | security update |
CVE-2017-7526
|
| VCID-xgfe-d1s6-eufu | GnuPG is vulnerable to an integer overflow that could lead to the execution of arbitrary code. |
CVE-2006-3746
|
| VCID-y6zm-whbe-gfg4 | GnuPG is vulnerable to a buffer overflow and an erroneous function pointer dereference that can result in the execution of arbitrary code. |
CVE-2006-6169
|
| VCID-zytz-gsnc-yqh9 | Multiple vulnerabilities have been discovered in GnuPG and Libgcrypt, which may result in execution of arbitrary code, Denial of Service, or the disclosure of private keys. |
CVE-2013-4402
|