Vulnerability-Lookup

ubuntu-cve-2018-12020

Vulnerability from osv_ubuntu

Published

2018-06-08 00:00

Modified

2026-05-20 14:50

Summary

Details

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2018-12020	REPORT
	https://dev.gnupg.org/T4012	REPORT
	https://lists.gnupg.org/pipermail/gnupg-announce/…	REPORT
	https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.…	REPORT
	https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.…	REPORT
	https://ubuntu.com/security/notices/USN-3675-1	ADVISORY
	https://sourceforge.net/p/enigmail/forum/announce…	REPORT
	https://neopg.io/blog/gpg-signature-spoof/	REPORT
	https://ubuntu.com/security/notices/USN-3675-2	ADVISORY
	https://ubuntu.com/security/notices/USN-3675-3	ADVISORY
	https://ubuntu.com/security/notices/USN-3964-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4839-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-12020	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gnupg",
            "binary_version": "1.4.16-1ubuntu2.5"
          },
          {
            "binary_name": "gnupg-curl",
            "binary_version": "1.4.16-1ubuntu2.5"
          },
          {
            "binary_name": "gpgv",
            "binary_version": "1.4.16-1ubuntu2.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "gnupg",
        "purl": "pkg:deb/ubuntu/gnupg@1.4.16-1ubuntu2.5?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.16-1ubuntu2.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.14-1ubuntu2",
        "1.4.15-1.1ubuntu1",
        "1.4.15-1.1ubuntu2",
        "1.4.15-2ubuntu1",
        "1.4.16-1ubuntu1",
        "1.4.16-1ubuntu2",
        "1.4.16-1ubuntu2.1",
        "1.4.16-1ubuntu2.3",
        "1.4.16-1ubuntu2.4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gnupg-agent",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "gnupg2",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "gpgsm",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "gpgv2",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "scdaemon",
            "binary_version": "2.0.22-3ubuntu1.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "gnupg2",
        "purl": "pkg:deb/ubuntu/gnupg2@2.0.22-3ubuntu1.4?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.22-3ubuntu1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.20-1ubuntu3",
        "2.0.22-1ubuntu1",
        "2.0.22-3ubuntu1",
        "2.0.22-3ubuntu1.1",
        "2.0.22-3ubuntu1.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-gnupg",
            "binary_version": "0.3.6-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "python3-gnupg",
            "binary_version": "0.3.6-1ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "python-gnupg",
        "purl": "pkg:deb/ubuntu/python-gnupg@0.3.6-1ubuntu0.1~esm1?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3.6-1ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.3.5-2",
        "0.3.6-1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gnupg",
            "binary_version": "1.4.20-1ubuntu3.2"
          },
          {
            "binary_name": "gnupg-curl",
            "binary_version": "1.4.20-1ubuntu3.2"
          },
          {
            "binary_name": "gpgv",
            "binary_version": "1.4.20-1ubuntu3.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "gnupg",
        "purl": "pkg:deb/ubuntu/gnupg@1.4.20-1ubuntu3.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.20-1ubuntu3.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.18-7ubuntu1",
        "1.4.19-6ubuntu1",
        "1.4.20-1ubuntu1",
        "1.4.20-1ubuntu2",
        "1.4.20-1ubuntu3",
        "1.4.20-1ubuntu3.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "dirmngr",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gnupg-agent",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gnupg2",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gpgsm",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gpgv2",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "scdaemon",
            "binary_version": "2.1.11-6ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "gnupg2",
        "purl": "pkg:deb/ubuntu/gnupg2@2.1.11-6ubuntu2.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.1.11-6ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.28-3ubuntu1",
        "2.0.28-3ubuntu2",
        "2.1.11-6ubuntu1",
        "2.1.11-6ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-gnupg",
            "binary_version": "0.3.8-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "python3-gnupg",
            "binary_version": "0.3.8-2ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-gnupg",
        "purl": "pkg:deb/ubuntu/python-gnupg@0.3.8-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3.8-2ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.3.7-2",
        "0.3.8-1",
        "0.3.8-2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "enigmail",
            "binary_version": "2:2.1.6+ds1-1~ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "enigmail",
        "purl": "pkg:deb/ubuntu/enigmail@2:2.1.6+ds1-1~ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:1.8.2-0ubuntu1",
        "2:1.8.2-4fakesync1",
        "2:1.9.1-1",
        "2:1.9.7-1~ubuntu0.16.04.1",
        "2:1.9.9-0ubuntu0.16.04.1",
        "2:2.0.3-0ubuntu2~16.04.1",
        "2:2.0.6-0ubuntu1~16.04.1",
        "2:2.0.7-0ubuntu1~16.04.1",
        "2:2.0.8-1~ubuntu0.16.04.2",
        "2:2.1.6+ds1-1~ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "dirmngr",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg-agent",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg-l10n",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg-utils",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg2",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg-agent",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg-wks-client",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg-wks-server",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgconf",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgsm",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv-static",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv-win32",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv2",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "scdaemon",
            "binary_version": "2.2.4-1ubuntu1.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "gnupg2",
        "purl": "pkg:deb/ubuntu/gnupg2@2.2.4-1ubuntu1.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.4-1ubuntu1.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.1.15-1ubuntu8",
        "2.2.4-1ubuntu1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python-gnupg",
            "binary_version": "0.4.1-1ubuntu1.18.04.1"
          },
          {
            "binary_name": "python3-gnupg",
            "binary_version": "0.4.1-1ubuntu1.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "python-gnupg",
        "purl": "pkg:deb/ubuntu/python-gnupg@0.4.1-1ubuntu1.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.4.1-1ubuntu1.18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.3.9-1",
        "0.4.1-1ubuntu1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "enigmail",
            "binary_version": "2:2.2.4-0ubuntu0.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "enigmail",
        "purl": "pkg:deb/ubuntu/enigmail@2:2.2.4-0ubuntu0.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:1.9.8.3-1",
        "2:1.9.9-1",
        "2:1.9.9-2",
        "2:2.0.3-0ubuntu2~18.04.1",
        "2:2.0.6-0ubuntu1~18.04.1",
        "2:2.0.7-0ubuntu1~18.04.1",
        "2:2.0.8-1~ubuntu0.18.04.2",
        "2:2.1.2-0ubuntu1~18.04.2",
        "2:2.1.6+ds1-1~ubuntu0.18.04.1",
        "2:2.2.4-0ubuntu0.18.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "gnupg1",
            "binary_version": "1.4.22-3ubuntu2"
          },
          {
            "binary_name": "gnupg1-l10n",
            "binary_version": "1.4.22-3ubuntu2"
          },
          {
            "binary_name": "gpgv1",
            "binary_version": "1.4.22-3ubuntu2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "gnupg1",
        "purl": "pkg:deb/ubuntu/gnupg1@1.4.22-3ubuntu2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.22-1ubuntu1",
        "1.4.22-3ubuntu1",
        "1.4.22-3ubuntu2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "enigmail",
            "binary_version": "2:2.2.4-0ubuntu0.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "enigmail",
        "purl": "pkg:deb/ubuntu/enigmail@2:2.2.4-0ubuntu0.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:2.1.2-0ubuntu1",
        "2:2.1.3+ds1-3",
        "2:2.1.3+ds1-4",
        "2:2.1.5+ds1-1",
        "2:2.1.6+ds1-1",
        "2:2.2.4-0ubuntu0.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "enigmail",
            "binary_version": "2:2.2.4-0.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "enigmail",
        "purl": "pkg:deb/ubuntu/enigmail@2:2.2.4-0.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:2.2.4-0.3"
      ]
    }
  ],
  "aliases": [],
  "details": "mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the \"--status-fd 2\" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.",
  "id": "UBUNTU-CVE-2018-12020",
  "modified": "2026-05-20T14:50:42Z",
  "published": "2018-06-08T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12020"
    },
    {
      "type": "REPORT",
      "url": "https://dev.gnupg.org/T4012"
    },
    {
      "type": "REPORT",
      "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html"
    },
    {
      "type": "REPORT",
      "url": "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=210e402acd3e284b32db1901e43bf1470e659e49"
    },
    {
      "type": "REPORT",
      "url": "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=2326851c60793653069494379b16d84e4c10a0ac"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3675-1"
    },
    {
      "type": "REPORT",
      "url": "https://sourceforge.net/p/enigmail/forum/announce/thread/b948279f/"
    },
    {
      "type": "REPORT",
      "url": "https://neopg.io/blog/gpg-signature-spoof/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3675-2"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3675-3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3964-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4839-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12020"
    }
  ],
  "related": [
    "USN-3675-1",
    "USN-3675-2",
    "USN-3675-3",
    "USN-3964-1",
    "USN-4839-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-12020"
  ]
}

CVE-2018-12020 (GCVE-0-2018-12020)

Vulnerability from cvelistv5 – Published: 2018-06-08 21:00 – Updated: 2024-08-05 08:24

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

21 references

URL	Tags
https://usn.ubuntu.com/3675-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2018:2180	vendor-advisoryx_refsource_REDHAT
https://lists.gnupg.org/pipermail/gnupg-announce/…	x_refsource_MISC
http://openwall.com/lists/oss-security/2018/06/08/2	x_refsource_MISC
https://www.debian.org/security/2018/dsa-4222	vendor-advisoryx_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:2181	vendor-advisoryx_refsource_REDHAT
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
https://www.debian.org/security/2018/dsa-4224	vendor-advisoryx_refsource_DEBIAN
http://www.securityfocus.com/bid/104450	vdb-entryx_refsource_BID
https://www.debian.org/security/2018/dsa-4223	vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/3675-3/	vendor-advisoryx_refsource_UBUNTU
http://www.securitytracker.com/id/1041051	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3675-1/	vendor-advisoryx_refsource_UBUNTU
https://dev.gnupg.org/T4012	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2019/04/30/4	mailing-listx_refsource_MLIST
http://seclists.org/fulldisclosure/2019/Apr/38	mailing-listx_refsource_FULLDISC
http://packetstormsecurity.com/files/152703/Johnn…	x_refsource_MISC
https://usn.ubuntu.com/3964-1/	vendor-advisoryx_refsource_UBUNTU
https://github.com/RUB-NDS/Johnny-You-Are-Fired	x_refsource_MISC
https://github.com/RUB-NDS/Johnny-You-Are-Fired/b…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2021…	mailing-listx_refsource_MLIST

Date Public

2018-06-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:24:03.773Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-3675-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3675-2/"
          },
          {
            "name": "RHSA-2018:2180",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2180"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2018/06/08/2"
          },
          {
            "name": "DSA-4222",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4222"
          },
          {
            "name": "RHSA-2018:2181",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2181"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
          },
          {
            "name": "DSA-4224",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4224"
          },
          {
            "name": "104450",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104450"
          },
          {
            "name": "DSA-4223",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4223"
          },
          {
            "name": "USN-3675-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3675-3/"
          },
          {
            "name": "1041051",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041051"
          },
          {
            "name": "USN-3675-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3675-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://dev.gnupg.org/T4012"
          },
          {
            "name": "[oss-security] 20190430 Spoofing OpenPGP and S/MIME Signatures in Emails (multiple clients)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2019/04/30/4"
          },
          {
            "name": "20190430 OpenPGP and S/MIME signature forgery attacks in multiple email clients",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Apr/38"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html"
          },
          {
            "name": "USN-3964-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3964-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/RUB-NDS/Johnny-You-Are-Fired"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf"
          },
          {
            "name": "[debian-lts-announce] 20211228 [SECURITY] [DLA 2862-1] python-gnupg security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00027.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-06-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the \"--status-fd 2\" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-28T22:06:08.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "USN-3675-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3675-2/"
        },
        {
          "name": "RHSA-2018:2180",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2180"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://openwall.com/lists/oss-security/2018/06/08/2"
        },
        {
          "name": "DSA-4222",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4222"
        },
        {
          "name": "RHSA-2018:2181",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2181"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
        },
        {
          "name": "DSA-4224",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4224"
        },
        {
          "name": "104450",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104450"
        },
        {
          "name": "DSA-4223",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4223"
        },
        {
          "name": "USN-3675-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3675-3/"
        },
        {
          "name": "1041051",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041051"
        },
        {
          "name": "USN-3675-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3675-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://dev.gnupg.org/T4012"
        },
        {
          "name": "[oss-security] 20190430 Spoofing OpenPGP and S/MIME Signatures in Emails (multiple clients)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2019/04/30/4"
        },
        {
          "name": "20190430 OpenPGP and S/MIME signature forgery attacks in multiple email clients",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Apr/38"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html"
        },
        {
          "name": "USN-3964-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3964-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/RUB-NDS/Johnny-You-Are-Fired"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf"
        },
        {
          "name": "[debian-lts-announce] 20211228 [SECURITY] [DLA 2862-1] python-gnupg security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00027.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-12020",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the \"--status-fd 2\" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-3675-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3675-2/"
            },
            {
              "name": "RHSA-2018:2180",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2180"
            },
            {
              "name": "https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html",
              "refsource": "MISC",
              "url": "https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html"
            },
            {
              "name": "http://openwall.com/lists/oss-security/2018/06/08/2",
              "refsource": "MISC",
              "url": "http://openwall.com/lists/oss-security/2018/06/08/2"
            },
            {
              "name": "DSA-4222",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4222"
            },
            {
              "name": "RHSA-2018:2181",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2181"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0"
            },
            {
              "name": "DSA-4224",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4224"
            },
            {
              "name": "104450",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104450"
            },
            {
              "name": "DSA-4223",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4223"
            },
            {
              "name": "USN-3675-3",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3675-3/"
            },
            {
              "name": "1041051",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041051"
            },
            {
              "name": "USN-3675-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3675-1/"
            },
            {
              "name": "https://dev.gnupg.org/T4012",
              "refsource": "MISC",
              "url": "https://dev.gnupg.org/T4012"
            },
            {
              "name": "[oss-security] 20190430 Spoofing OpenPGP and S/MIME Signatures in Emails (multiple clients)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2019/04/30/4"
            },
            {
              "name": "20190430 OpenPGP and S/MIME signature forgery attacks in multiple email clients",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2019/Apr/38"
            },
            {
              "name": "http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html"
            },
            {
              "name": "USN-3964-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3964-1/"
            },
            {
              "name": "https://github.com/RUB-NDS/Johnny-You-Are-Fired",
              "refsource": "MISC",
              "url": "https://github.com/RUB-NDS/Johnny-You-Are-Fired"
            },
            {
              "name": "https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf",
              "refsource": "MISC",
              "url": "https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf"
            },
            {
              "name": "[debian-lts-announce] 20211228 [SECURITY] [DLA 2862-1] python-gnupg security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00027.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-12020",
    "datePublished": "2018-06-08T21:00:00.000Z",
    "dateReserved": "2018-06-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T08:24:03.773Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

usn-3675-1

Vulnerability from osv_ubuntu

Published

2018-06-11 21:53

Modified

2026-04-27 14:11

Summary

gnupg, gnupg2 vulnerabilities

Details

Marcus Brinkmann discovered that during decryption or verification, GnuPG did not properly filter out terminal sequences when reporting the original filename. An attacker could use this to specially craft a file that would cause an application parsing GnuPG output to incorrectly interpret the status of the cryptographic operation reported by GnuPG. (CVE-2018-12020)

Lance Vick discovered that GnuPG did not enforce configurations where key certification required an offline primary Certify key. An attacker with access to a signing subkey could generate certifications that appeared to be valid. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-9234)

References

URL

Type

	https://ubuntu.com/security/notices/USN-3675-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-9234	REPORT
	https://ubuntu.com/security/CVE-2018-12020	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gnupg",
            "binary_version": "1.4.16-1ubuntu2.5"
          },
          {
            "binary_name": "gnupg-curl",
            "binary_version": "1.4.16-1ubuntu2.5"
          },
          {
            "binary_name": "gpgv",
            "binary_version": "1.4.16-1ubuntu2.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "gnupg",
        "purl": "pkg:deb/ubuntu/gnupg@1.4.16-1ubuntu2.5?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.16-1ubuntu2.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.14-1ubuntu2",
        "1.4.15-1.1ubuntu1",
        "1.4.15-1.1ubuntu2",
        "1.4.15-2ubuntu1",
        "1.4.16-1ubuntu1",
        "1.4.16-1ubuntu2",
        "1.4.16-1ubuntu2.1",
        "1.4.16-1ubuntu2.3",
        "1.4.16-1ubuntu2.4"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gnupg",
            "binary_version": "1.4.20-1ubuntu3.2"
          },
          {
            "binary_name": "gnupg-curl",
            "binary_version": "1.4.20-1ubuntu3.2"
          },
          {
            "binary_name": "gpgv",
            "binary_version": "1.4.20-1ubuntu3.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "gnupg",
        "purl": "pkg:deb/ubuntu/gnupg@1.4.20-1ubuntu3.2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.4.20-1ubuntu3.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.18-7ubuntu1",
        "1.4.19-6ubuntu1",
        "1.4.20-1ubuntu1",
        "1.4.20-1ubuntu2",
        "1.4.20-1ubuntu3",
        "1.4.20-1ubuntu3.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-9234",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "dirmngr",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg-agent",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg-l10n",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg-utils",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gnupg2",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg-agent",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg-wks-client",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpg-wks-server",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgconf",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgsm",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv-static",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv-win32",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "gpgv2",
            "binary_version": "2.2.4-1ubuntu1.1"
          },
          {
            "binary_name": "scdaemon",
            "binary_version": "2.2.4-1ubuntu1.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "gnupg2",
        "purl": "pkg:deb/ubuntu/gnupg2@2.2.4-1ubuntu1.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.4-1ubuntu1.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.1.15-1ubuntu8",
        "2.2.4-1ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "Marcus Brinkmann discovered that during decryption or verification,\nGnuPG did not properly filter out terminal sequences when reporting the\noriginal filename. An attacker could use this to specially craft a file\nthat would cause an application parsing GnuPG output to incorrectly\ninterpret the status of the cryptographic operation reported by GnuPG.\n(CVE-2018-12020)\n\nLance Vick discovered that GnuPG did not enforce configurations where\nkey certification required an offline primary Certify key. An attacker\nwith access to a signing subkey could generate certifications that\nappeared to be valid. This issue only affected Ubuntu 18.04 LTS.\n(CVE-2018-9234)\n",
  "id": "USN-3675-1",
  "modified": "2026-04-27T14:11:23Z",
  "published": "2018-06-11T21:53:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3675-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-9234"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12020"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "gnupg, gnupg2 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-9234",
    "UBUNTU-CVE-2018-12020"
  ]
}

usn-3675-2

Vulnerability from osv_ubuntu

Published

2018-06-15 00:43

Modified

2026-04-27 14:11

Summary

gnupg2 vulnerability

Details

USN-3675-1 fixed a vulnerability in GnuPG 2 for Ubuntu 18.04 LTS and Ubuntu 17.10. This update provides the corresponding update for GnuPG 2 in Ubuntu 16.04 LTS and Ubuntu 14.04 LTS.

Original advisory details:

References

URL

Type

	https://ubuntu.com/security/notices/USN-3675-2	ADVISORY
	https://ubuntu.com/security/CVE-2018-12020	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "gnupg-agent",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "gnupg2",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "gpgsm",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "gpgv2",
            "binary_version": "2.0.22-3ubuntu1.4"
          },
          {
            "binary_name": "scdaemon",
            "binary_version": "2.0.22-3ubuntu1.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "gnupg2",
        "purl": "pkg:deb/ubuntu/gnupg2@2.0.22-3ubuntu1.4?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.22-3ubuntu1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.20-1ubuntu3",
        "2.0.22-1ubuntu1",
        "2.0.22-3ubuntu1",
        "2.0.22-3ubuntu1.1",
        "2.0.22-3ubuntu1.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "dirmngr",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gnupg-agent",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gnupg2",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gpgsm",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "gpgv2",
            "binary_version": "2.1.11-6ubuntu2.1"
          },
          {
            "binary_name": "scdaemon",
            "binary_version": "2.1.11-6ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "gnupg2",
        "purl": "pkg:deb/ubuntu/gnupg2@2.1.11-6ubuntu2.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.1.11-6ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0.28-3ubuntu1",
        "2.0.28-3ubuntu2",
        "2.1.11-6ubuntu1",
        "2.1.11-6ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-3675-1 fixed a vulnerability in GnuPG 2 for Ubuntu 18.04 LTS and\nUbuntu 17.10. This update provides the corresponding update for GnuPG 2\nin Ubuntu 16.04 LTS and Ubuntu 14.04 LTS.\n\nOriginal advisory details:\n\n Marcus Brinkmann discovered that during decryption or verification,\n GnuPG did not properly filter out terminal sequences when reporting the\n original filename. An attacker could use this to specially craft a file\n that would cause an application parsing GnuPG output to incorrectly\n interpret the status of the cryptographic operation reported by GnuPG.\n",
  "id": "USN-3675-2",
  "modified": "2026-04-27T14:11:23Z",
  "published": "2018-06-15T00:43:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3675-2"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12020"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "gnupg2 vulnerability",
  "upstream": [
    "UBUNTU-CVE-2018-12020"
  ]
}

usn-3964-1

Vulnerability from osv_ubuntu

Published

2019-05-02 14:47

Modified

2026-04-27 14:11

Summary

python-gnupg vulnerabilities

Details

Marcus Brinkmann discovered that GnuPG before 2.2.8 improperly handled certain command line parameters. A remote attacker could use this to spoof the output of GnuPG and cause unsigned e-mail to appear signed. (CVE-2018-12020)

It was discovered that python-gnupg incorrectly handled the GPG passphrase. A remote attacker could send a specially crafted passphrase that would allow them to control the output of encryption and decryption operations. (CVE-2019-6690)

References

URL

Type

	https://ubuntu.com/security/notices/USN-3964-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-12020	REPORT
	https://ubuntu.com/security/CVE-2019-6690	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-6690",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python-gnupg",
            "binary_version": "0.4.1-1ubuntu1.18.04.1"
          },
          {
            "binary_name": "python3-gnupg",
            "binary_version": "0.4.1-1ubuntu1.18.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "python-gnupg",
        "purl": "pkg:deb/ubuntu/python-gnupg@0.4.1-1ubuntu1.18.04.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.4.1-1ubuntu1.18.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.3.9-1",
        "0.4.1-1ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "\nMarcus Brinkmann discovered that GnuPG before 2.2.8 improperly handled certain\ncommand line parameters. A remote attacker could use this to spoof the output of\nGnuPG and cause unsigned e-mail to appear signed.\n(CVE-2018-12020)\n\nIt was discovered that python-gnupg incorrectly handled the GPG passphrase. A\nremote attacker could send a specially crafted passphrase that would allow them\nto control the output of encryption and decryption operations.\n(CVE-2019-6690)\n\n",
  "id": "USN-3964-1",
  "modified": "2026-04-27T14:11:24Z",
  "published": "2019-05-02T14:47:59Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3964-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12020"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-6690"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "python-gnupg vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-12020",
    "UBUNTU-CVE-2019-6690"
  ]
}

usn-4839-1

Vulnerability from osv_ubuntu

Published

2021-03-15 22:21

Modified

2026-06-29 10:52

Summary

python-gnupg vulnerabilities

Details

Marcus Brinkmann discovered that python-gnupg improperly handled certain command line parameters. A remote attacker could use this to spoof the output of python-gnupg and cause unsigned e-mail to appear signed. (CVE-2018-12020)

References

URL

Type

	https://ubuntu.com/security/notices/USN-4839-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-12020	REPORT
	https://ubuntu.com/security/CVE-2019-6690	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-6690",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-gnupg",
            "binary_version": "0.3.6-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "python3-gnupg",
            "binary_version": "0.3.6-1ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "python-gnupg",
        "purl": "pkg:deb/ubuntu/python-gnupg@0.3.6-1ubuntu0.1~esm1?arch=source\u0026distro=trusty/esm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3.6-1ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.3.5-2",
        "0.3.6-1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-12020",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-6690",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-gnupg",
            "binary_version": "0.3.8-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "python3-gnupg",
            "binary_version": "0.3.8-2ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-gnupg",
        "purl": "pkg:deb/ubuntu/python-gnupg@0.3.8-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.3.8-2ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.3.7-2",
        "0.3.8-1",
        "0.3.8-2"
      ]
    }
  ],
  "aliases": [],
  "details": "Marcus Brinkmann discovered that python-gnupg improperly handled certain\ncommand line parameters. A remote attacker could use this to spoof the\noutput of python-gnupg and cause unsigned e-mail to appear signed.\n(CVE-2018-12020)\n\nIt was discovered that python-gnupg incorrectly handled the GPG passphrase.\nA remote attacker could send a specially crafted passphrase that would\nallow them to control the output of encryption and decryption operations.\n(CVE-2019-6690)",
  "id": "USN-4839-1",
  "modified": "2026-06-29T10:52:49Z",
  "published": "2021-03-15T22:21:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4839-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12020"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-6690"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "python-gnupg vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-12020",
    "UBUNTU-CVE-2019-6690"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

ubuntu-cve-2018-12020

Vulnerability from osv_ubuntu

CVE-2018-12020 (GCVE-0-2018-12020)

usn-3675-1

Vulnerability from osv_ubuntu

usn-3675-2

Vulnerability from osv_ubuntu

usn-3964-1

Vulnerability from osv_ubuntu

usn-4839-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour