Spoofing attack in GnuPG - CVE-2018-12020

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU13258

Spoofing attack in GnuPG - CVE-2018-12020

Published: June 10, 2018 / Updated: June 11, 2018


Vulnerability identifier: #VU13258
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-12020
CWE-ID: CWE-451
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to conduct spoofing attack.

The vulnerability exists due to an input validation flaw in the processing of filenames when displaying the filename. A remote attacker can send a signed and encrypted email message that includes the specially crafted name of the original input file, spoof status messages and fake the verification status of a signed email message.


Affected software

GnuPG
Amazon Linux AMI
Debian Linux
Arch Linux
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for ARM
Red Hat Enterprise Linux EUS Compute Node
SUSE Linux
Slackware Linux
Fedora
gnupg1 (Alpine package)
gnupg (Alpine package)
openSUSE Leap
gnupg
libgpg-error
gnupg2
Data Computing Appliance (DCA)

How to mitigate CVE-2018-12020

Update to version 2.2.8.

gnupg1 (Alpine package) - update to 1.4.22-r1
gnupg (Alpine package) - update to 2.1.12-r1
gnupg - addressed in versions 1.4.22-4.fc27, 1.4.22-7.fc28, 1.4.23-1.fc27, 1.4.23-1.fc28
libgpg-error - addressed in versions 1.31-1.fc27, 1.31-1.fc28
gnupg2 - addressed in versions 2.2.8-1.fc27, 2.2.8-1.fc28
Data Computing Appliance (DCA) - update to 3.5.2.0

External References

Related Security Bulletins