CVE-2019-13050
High
Description
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Gnupg
PublishedJun 29, 2019
First seenJun 29, 2019
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnupg gnupg | v ≤ 2.2.16 | — |
| sks_keyserver_project sks_keyserver | v ≤ 1.2.0 | — |
| fedoraproject fedora | 29, 30 | — |
| opensuse leap | 15.0, 15.1 | — |
| f5 traffix_signaling_delivery_controller | 5.0.0 ≤ v ≤ 5.1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.