GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnupg2-smimeUpgrade gnupg2 | Oct 13, 2022 | Jul 1, 2022 |
| Alpine Linux | — | Upgrade gnupg | Mar 26, 2024 | Jul 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade gnupg2Upgrade gnupg2-debuginfoUpgrade gnupg2-smime | Sep 30, 2022 | Jul 1, 2022 |
| Amazon_linux | — | Upgrade gnupg2 | Aug 24, 2022 | Jul 1, 2022 |
| Amazon_linux_2023 | — | Upgrade gnupg2-debuginfoUpgrade gnupg2-smime-debuginfoUpgrade gnupg2-debugsourceUpgrade gnupg2-smimeUpgrade gnupg2-minimal-debuginfoUpgrade gnupg2Upgrade gnupg2-minimal | Feb 17, 2025 | Jun 30, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 1, 2022 |
| Centos_linux | — | Upgrade gnupg2Upgrade gnupg2-smimeUpgrade gnupg2-debugsourceUpgrade gnupg2-debuginfoUpgrade gnupg2-smime-debuginfo | Oct 20, 2022 | Jul 1, 2022 |
| Debian | — | Upgrade gnupg2 | Aug 17, 2022 | Jul 1, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade app-crypt/gnupg. | Aug 12, 2024 | Jul 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnupg2 | Nov 3, 2022 | Jul 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gnupg2 | Nov 4, 2022 | Jul 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gnupg2-smimeUpgrade gnupg2 | Oct 11, 2022 | Jul 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gnupg2 | Sep 14, 2022 | Jul 1, 2022 |
| Oracle_linux | — | Upgrade gnupg2-smimeUpgrade gnupg2 | Sep 14, 2022 | Jun 30, 2022 |
| Redhat_linux | — | Upgrade gnupg2-debugsourceUpgrade gnupg2-smimeUpgrade gnupg2-smime-debuginfoUpgrade gnupg2-debuginfoUpgrade gnupg2No solution exists | Oct 20, 2022 | Jul 1, 2022 |
| Rocky_linux | — | Upgrade gnupg2Upgrade gnupg2-debugsourceUpgrade gnupg2-smime-debuginfoUpgrade gnupg2-smimeUpgrade gnupg2-debuginfo | Mar 12, 2024 | Jul 1, 2022 |
| Suse | — | Upgrade gpg2Upgrade dirmngrUpgrade gpg2-lang | Oct 26, 2022 | Jul 1, 2022 |
| Ubuntu | — | Upgrade gnupg (Ubuntu Pro)Upgrade gnupgUpgrade gpgUpgrade gnupg2 (Ubuntu Pro)Upgrade gnupg2 | Mar 22, 2023 | Jul 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub