Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2024-53856

rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability is fixed in 0.14.1.

VectorNETWORK

PublishedDec 05, 2024, 16:15

Published Bysecurity-advisories@github.com

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

pgp(crates.io)00.14.1N/A

References

https://github.com/rpgp/rpgp/security/advisories/GHSA-9rmp-2568-59rv

Weakness Type

CWE-130

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK