Most recent entries from all

bdu:2023-01658

Withdrawn: BELL-CVE-2019-14855 — CVE-2019-14855 does not affect BellSoft software

Withdrawn by the publisher.

Withdrawn: CLEANSTART-2026-HT23337 — flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm

Withdrawn by the publisher.

Affected: CleanStart: gnupg

Security vulnerability affects the gnupg package. A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm.

cnvd-2020-46841

EUVD-2026-56680

fkie_cve-2019-14855

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.

GHSA-cpvm-f36g-55vg

gsd-2019-14855

ICSA-24-284-16 — Rockwell Automation DataMosaix Private Cloud

DataMosaix Private Cloud utilizes GnuPG which contains a certificate signature vulnerability found in the SHA-1 algorithm. A threat actor could use this weakness to create forged certificate signatures. If exploited, a malicious user could view customer data. DataMosaix Private Cloud utilizes LZ4 which contains a heap-based buffer overflow vulnerability in versions before 1.9.2 (related to LZ4_compress_destSize), that affects applications that call LZ4_compress_fast with a large input. This issue can also lead to data corruption. If exploited, a malicious actor could perform a remote code execution. DataMosaix Private Cloud utilizes shell.c which contains a vulnerability in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. A threat actor with command execution in the shell can use "enable -f" for runtime loading to gain privileges. If exploited, a malicious actor could perform a remote code execution. DataMosaix Private Cloud utilizes SQLite 3.30.1 which contains a vulnerability in sqlite3Select in select.c that allows a crash if a subselect uses both DISTINCT and window functions and has certain ORDER BY usage. If exploited, a malicious actor could perform a denial of service, which would require the use to restart the software to recover it. DataMosaix Private Cloud utilizes libseccomp, which contains a vulnerability in versions 2.4.0 and earlier that does not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT,…

openSUSE-SU-2024:10815-1 — dirmngr-2.2.27-2.4 on GA media

dirmngr-2.2.27-2.4 on GA media

UBUNTU-CVE-2019-14855

Affected: Ubuntu:Pro:14.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg, Ubuntu:Pro:16.04:LTS: gnupg2, Ubuntu:18.04:LTS: gnupg2, Ubuntu:18.04:LTS: gnupg1, Ubuntu:20.04:LTS: gnupg1, Ubuntu:22.04:LTS: gnupg1, Ubuntu:24.04:LTS: gnupg1, Ubuntu:25.10: gnupg1, Ubuntu:26.04:LTS: gnupg1