VDB
GCVE-VVD-MAGEIA-2019-108
GCVE-VVD-MAGEIA-2019-108
Advisory Published
GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF)
vulnerability in dirmngr that can result in Attacker controlled CSRF,
Information Disclosure, DoS. This attack appear to be exploitable via
Victim must perform a WKD request, e.g. enter an email address in the
composer window of Thunderbird/Enigmail. This vulnerability appears to
have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060.
(CVE-2018-1000858)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | kernel | 0 (affected), 5.2.10-1.mga7 (unaffected) | — |
| Mageia | kernel-userspace-headers | 0 (affected), 5.2.10-1.mga7 (unaffected) | — |
| Mageia | kmod-virtualbox | 0 (affected), 6.0.10-4.mga7 (unaffected) | — |
| Mageia | kmod-xtables-addons | 0 (affected), 3.3-58.mga7 (unaffected) | — |
| Mageia | gnupg2 | 0 (affected), 2.1.21-3.2.mga6 (unaffected), 0 (affected), 2.1.21-3.2.mga6 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.