Skip to content
OpenAdvisories
Unscored USN-5431-1 1 CVE

gnupg2 vulnerability

Published May 30, 2022 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that GnuPG was not properly processing keys
with large amounts of signatures. An attacker could possibly
use this issue to cause a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS gnupg2 2.2.4-1ubuntu1.5

Vulnerabilities 1

  • Unscored —
    CVE-2019-13050

    Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes …

    gnupg2 gnupg sks Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-13050