中危 GnuPG 注入漏洞（CVE-2022-34903）
CVE编号
CVE-2022-34903利用情况
暂无补丁情况
官方补丁披露时间
2022-07-02漏洞描述
GnuPG是GNU社区的一套开源的加密软件，采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。 GnuPG 2.3.6之前的版本存在注入漏洞，该漏洞源于在攻击者拥有来自受害者密钥环的任何密钥信息并且满足其他约束（例如，使用 GPGME）的异常情况下，允许通过注入状态行来伪造签名。解决建议
目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页：https://www.openwall.com/lists/oss-security/2022/06/30/1受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | gnupg | gnupg | * | Up to (including) 2.3.6 | |||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.13 | gnupg | * | Up to (excluding) 2.2.31-r1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.14 | gnupg | * | Up to (excluding) 2.2.31-r1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.15 | gnupg | * | Up to (excluding) 2.2.31-r2 | |||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.16 | gnupg | * | Up to (excluding) 2.2.35-r4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.17 | gnupg | * | Up to (excluding) 2.2.35-r4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.18 | gnupg | * | Up to (excluding) 2.2.35-r4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_edge | gnupg | * | Up to (excluding) 2.2.35-r4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | amazon_2 | gnupg2 | * | Up to (excluding) 2.0.22-5.amzn2.0.5 | |||||
| 运行在以下环境 | |||||||||
| 系统 | amazon_2022 | gnupg2 | * | Up to (excluding) 2.3.7-1.amzn2022.0.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | amazon_2023 | gnupg2 | * | Up to (excluding) 2.3.7-1.amzn2023.0.3 | |||||
| 运行在以下环境 | |||||||||
| 系统 | amazon_AMI | gnupg2 | * | Up to (excluding) 2.0.28-2.35.amzn1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | anolis_os_8 | gnupg2-smime | * | Up to (excluding) 2.2.20-3 | |||||
| 运行在以下环境 | |||||||||
| 系统 | centos_8 | gnupg2-smime-debuginfo | * | Up to (excluding) 2.2.20-3.el8_6 | |||||
| 运行在以下环境 | |||||||||
| 系统 | debian_10 | gnupg2 | * | Up to (excluding) 2.2.12-1+deb10u2 | |||||
| 运行在以下环境 | |||||||||
| 系统 | debian_11 | gnupg2 | * | Up to (excluding) 2.2.27-2+deb11u2 | |||||
| 运行在以下环境 | |||||||||
| 系统 | debian_12 | gnupg2 | * | Up to (excluding) 2.2.35-3 | |||||
| 运行在以下环境 | |||||||||
| 系统 | debian_9 | gnupg2 | * | Up to (including) 2.1.18-8~deb9u4 | |||||
| 运行在以下环境 | |||||||||
| 系统 | debian_sid | gnupg2 | * | Up to (excluding) 2.2.35-3 | |||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_35 | gnupg1 | * | Up to (excluding) 2.3.4-2.fc35 | |||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_36 | gnupg1 | * | Up to (excluding) 2.3.6-2.fc36 | |||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_8 | gnupg1 | * | Up to (excluding) 1.4.23-15.el8 | |||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_EPEL_9 | gnupg1 | * | Up to (excluding) 1.4.23-19.el9 | |||||
| 运行在以下环境 | |||||||||
| 系统 | kylinos_aarch64_V10SP2 | gnupg2 | * | Up to (excluding) 2.2.21-5.ky10 | |||||
| 运行在以下环境 | |||||||||
| 系统 | kylinos_x86_64_V10SP2 | gnupg2 | * | Up to (excluding) 2.2.21-5.ky10 | |||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_5.2 | gpg2 | * | Up to (excluding) 2.2.27-150300.3.5.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.3 | gpg2 | * | Up to (excluding) 2.2.27-150300.3.5.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.4 | gpg2 | * | Up to (excluding) 2.2.27-150300.3.5.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_8 | oraclelinux-release | * | Up to (excluding) 2.2.20-3.el8_6 | |||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_9 | oraclelinux-release | * | Up to (excluding) 2.3.3-2.el9_0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | redhat_8 | gnupg2-smime-debuginfo | * | Up to (excluding) 2.2.20-3.el8_6 | |||||
| 运行在以下环境 | |||||||||
| 系统 | redhat_9 | gnupg2-debuginfo | * | Up to (excluding) 2.3.3-2.el9_0 | |||||
| 运行在以下环境 | |||||||||
| 系统 | suse_12_SP5 | gpg2-lang | * | Up to (excluding) 2.0.24-9.11.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_14.04 | gnupg | * | Up to (excluding) 1.4.16-1ubuntu2.6+esm1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_16.04 | gnupg | * | Up to (excluding) 2.1.11-6ubuntu2.1+esm1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_18.04 | gnupg2 | * | Up to (excluding) 2.2.4-1ubuntu1.6 | |||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_20.04 | gnupg2 | * | Up to (excluding) 2.2.19-3ubuntu2.2 | |||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_21.10 | gnupg2 | * | Up to (excluding) 2.2.20-1ubuntu4.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | ubuntu_22.04 | gnupg2 | * | Up to (excluding) 2.2.27-3ubuntu2.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | unionos_a | gnupg2 | * | Up to (excluding) gnupg2-2.2.20-3.uelc20.01 | |||||
- 攻击路径 远程
- 攻击复杂度 复杂
- 权限要求 普通权限
- 影响范围 全局影响
- EXP成熟度 未验证
- 补丁情况 官方补丁
- 数据保密性 数据泄露
- 数据完整性 无影响
- 服务器危害 无影响
- 全网数量 N/A
| CWE-ID | 漏洞类型 |
| CWE-74 | 输出中的特殊元素转义处理不恰当（注入） |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论