CVE-2022-34903

Description

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.

Weakness classification

• nvd@nist.gov: CWE-74

Primary references

• cve@mitre.org — Exploit, Mailing List, Third Party Advisory
• cve@mitre.org — Issue Tracking, Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Issue Tracking, Patch, Vendor Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Exploit, Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mailing List, Patch, Third Party Advisory