Wind River Support Network

HomeDefectsLIN1021-3898
Fixed

LIN1021-3898 : Security Advisory - gnupg - CVE-2022-34903

Created: Jul 3, 2022    Updated: Mar 1, 2023
Resolved Date: Mar 1, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.17
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.

CREATE(Triage):(User=admin) CVE-2022-34903 (https://nvd.nist.gov/vuln/detail/CVE-2022-34903)

CVEs


Live chat
Online