AZL-10074
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-10074.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-10074
- Upstream
- Published
- 2022-07-01T22:15:08Z
- Modified
- 2026-04-21T04:19:54.492384Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
- Summary
- CVE-2022-34903 affecting package gnupg2 for versions less than 2.3.7-1
- Details
-
GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.
- References