vulnerabilityOpenwall oss-security - Message Malleability
Encrypted message malleability checks are incorrectly enforced causing plaintext recovery attacks
A GnuPG vulnerability involving incorrectly enforced encrypted-message malleability checks and plaintext recovery attacks.
Exploitation evidence
Has exploited
Affected software
| Software | Affected versions | Fixed in | Sources |
|---|---|---|---|
CVSS (Common Vulnerability Scoring System)
Preferred assessment
Vector
Attack vector
Attack complexity
Privileges required
User interaction
Scope
Confidentiality impact
Integrity impact
Availability impact
Source assessments
EPSS (Exploit Prediction Scoring System)
Probability
Percentile
Model
Preferred remediation
Action