VDB

GCVE-110-MAGEIA-2020-425

GCVE-110-MAGEIA-2020-425
Advisory Published
Vulnetix · Advisory published November 15, 2020
The Kleopatra component before 20.07.80 for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe handling of command-line options. The Qt platformpluginpath command-line option can be used to load an arbitrary library. (CVE-2020-24972).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiakleopatra0 (affected), 19.04.0-1.1.mga7 (unaffected)—

Aliases

CVE-2020-24972

References

Updated kleopatra packages fix a security vulnerability
advisory
Updated kleopatra packages fix a security vulnerability
issue
Updated kleopatra packages fix a security vulnerability
issue

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›