CVE-2008-1530: Critical severity gnupg 2 (gnu privacy guard) vulnerability

Published Mar 27, 2008

Updated

GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."

Affected Software

2 affected components

gnupg GnuPG=1.4.8

gnupg GnuPG=2.0.8

Event History

Mar 27, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1530?

CVE-2008-1530 is classified as a medium severity vulnerability due to its potential for denial of service and possible arbitrary code execution.

How do I fix CVE-2008-1530?

To mitigate CVE-2008-1530, upgrade to the latest version of GnuPG that addresses the vulnerability.

What systems are affected by CVE-2008-1530?

GnuPG versions 1.4.8 and 2.0.8 are specifically affected by CVE-2008-1530.

Can CVE-2008-1530 be exploited remotely?

Yes, CVE-2008-1530 can be exploited remotely via crafted duplicate keys from key servers.

What are the potential impacts of CVE-2008-1530?

The impacts of CVE-2008-1530 include application crashes and the possibility of executing arbitrary code.