Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 27 Mar 2008 18:39:16 -0400 (EDT)
From: "Steven M. Christey" <>
To: Robert Buchholz <>
Subject: Re: CVE request: GnuPG Import Key Memory Corruption

Name: CVE-2008-1530
Status: Candidate
Reference: MISC:
Reference: CONFIRM:
Reference: CONFIRM:

GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial
of service (crash) and possibly execute arbitrary code via crafted
duplicate keys that are imported from key servers, which triggers
"memory corruption around deduplication of user IDs."

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.