Home > Vulnerability Database > CVE-2019-6690

Mend.io Vulnerability Database

CVE-2019-6690

Good to know:

Date: March 21, 2019

python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Improper Input Validation" issue affecting the affect functionality component.

Language: Python

Severity Score

6.5

Related Resources (17)

Url: http://packetstormsecurity.com/files/151341/Python-GnuPG-0.4.3-Improper-Input-Validation.html

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3WMV6XNPPL3VB3RQRFFOBCJ3AGWC4K47/

Url: https://pypi.org/project/python-gnupg/#history

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-6690

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2019-6690

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6KYZMN2PWXY4ENZVJUVTGFBVYEVY7II/

Url: https://seclists.org/bugtraq/2019/Jan/41

Url: https://lists.debian.org/debian-lts-announce/2021/12/msg00027.html

Url: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00008.html

Url: https://blog.hackeriet.no/cve-2019-6690-python-gnupg-vulnerability/

Url: http://www.securityfocus.com/bid/106756

Url: https://lists.debian.org/debian-lts-announce/2019/02/msg00021.html

Url: https://usn.ubuntu.com/3964-1/

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X4VFRUG56542LTYK4444TPJBGR57MT25/

Url: https://security-tracker.debian.org/tracker/CVE-2019-6690

Url: http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00058.html

Url: https://www.mend.io/vulnerability-database/CVE-2019-6690

Severity Score

6.5

Weakness Type (CWE)

Input Validation

CWE-20

Top Fix

Upgrade Version

Upgrade to version 0.4.4

Learn More

CVSS v3

Base Score:	6.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL

CVSS v2

Base Score:	7.5
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2019-6690

Good to know:

Date: March 21, 2019

Language: Python

Severity Score

Related Resources (17)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3

CVSS v2

Do you need more information?