Gpgme

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-8945 Feb 12, 18:15 Go HIGH POC PATCH This Week

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

RCE Docker Use After Free Memory Corruption Red Hat +10

NVD GitHub

CVSS 3.1

7.5

EPSS

5.1%

CVE-2014-3564 Oct 20, 17:55 MEDIUM PATCH This Month

Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash). Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

RCE Buffer Overflow Denial Of Service Debian Canonical +4

NVD

CVSS 2.0

6.8

EPSS

2.8%

CVE-2020-8945 Go

EPSS 5% CVSS 7.5

HIGH POC PATCH This Week

RCE Docker Use After Free +12

NVD GitHub

CVE-2014-3564

EPSS 3% CVSS 6.8

MEDIUM PATCH This Month

RCE Buffer Overflow Denial Of Service +6

NVD