Vulnetix
Try Vulnetix Request Demo
CVE-2019-6690 PUBLISHED

python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component.

EPSS 21.43% · 95.7th percentile

Risk Scores

EPSS Score
21.43%
95.7th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSpython-gnupg0.4.7-1, 0.4.6-1, 0
Ubuntu:Pro:14.04:LTSpython-gnupg0, 0.3.5-2, 0.3.6-1
Ubuntu:20.04:LTSpython-gnupg0.4.3-1ubuntu1, 0.4.5-2, 0.4.5-1
Ubuntu:Pro:16.04:LTSpython-gnupg0, 0.3.8-2, 0.3.8-1
Ubuntu:18.04:LTSpython-gnupg0.4.1-1ubuntu1, 0.3.9-1, 0

Timeline

References

Open in Interactive Console →