Unscored severity · published Mar 27, 2008
CVE-2008-1530
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key…
–
CVSS
4.3%
EPSS
No
On KEV
Description
GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers "memory corruption around deduplication of user IDs."
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnupg · Gnupg
1.4.8; 2.0.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1530
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1530
lists.gnupg.org
http://lists.gnupg.org/pipermail/gnupg-announce/2008q1/000272.html
Vendor Advisory
http://secunia.com/advisories/29568
www.ocert.org
http://www.ocert.org/advisories/ocert-2008-1.html
www.securityfocus.com
http://www.securityfocus.com/bid/28487
www.vupen.com
http://www.vupen.com/english/advisories/2008/1056/references
bugs.g10code.com
https://bugs.g10code.com/gnupg/issue894
More from Gnupg
9.8
CVE-2026-24881
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during…
9.8
CVE-2022-3515
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser
8.8
CVE-2018-1000858
GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS
8.1
CVE-2010-2547
Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary…
7.8
CVE-2026-24882
In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys