CVE catalog

CVE-2019-13050

Security update for gpg2

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.52% · Oct 25, 2026

It was discovered that GnuPG was not properly processing keys with large amounts of signatures. An attacker could possibly use this issue to cause a denial of service.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugnupg218.042.1.15-1ubuntu8vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.1vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.2vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.3vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.4vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.5fixed
Ubuntugnupgpro1.4.18-7ubuntu1vulnerable
Ubuntugnupgpro1.4.19-6ubuntu1vulnerable
Ubuntugnupgpro1.4.20-1ubuntu1vulnerable
Ubuntugnupgpro1.4.20-1ubuntu2vulnerable
Ubuntugnupgpro1.4.20-1ubuntu3vulnerable
Ubuntugnupgpro1.4.20-1ubuntu3.1vulnerable
Ubuntugnupgpro1.4.20-1ubuntu3.2vulnerable
Ubuntugnupgpro1.4.20-1ubuntu3.3vulnerable
Ubuntugnupgpro1.4.20-1ubuntu3.3+esm2vulnerable
Ubuntugnupgpro1.4.20-1ubuntu3.3+esm3vulnerable
Ubuntugnupg2pro2.0.28-3ubuntu1vulnerable
Ubuntugnupg2pro2.0.28-3ubuntu2vulnerable
Ubuntugnupg2pro2.1.11-6ubuntu1vulnerable
Ubuntugnupg2pro2.1.11-6ubuntu2vulnerable
Ubuntugnupg2pro2.1.11-6ubuntu2.1vulnerable
Ubuntugnupg2pro2.1.11-6ubuntu2.1+esm1vulnerable
Ubuntugnupg2pro2.1.11-6ubuntu2.1+esm2vulnerable
Ubuntugnupg2pro2.1.11-6ubuntu2.1+esm3vulnerable
Ubuntusks16.041.1.5-4vulnerable
Ubuntusks16.041.1.5-4build1vulnerable
Ubuntusks16.041.1.5-4build2vulnerable
Ubuntugnupg218.042.1.15-1ubuntu8vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.1vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.2vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.3vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.4vulnerable
Ubuntugnupg218.042.2.4-1ubuntu1.5fixed
Ubuntusks18.041.1.6-13vulnerable
Ubuntusks18.041.1.6-14vulnerable
Ubuntusks20.041.1.6-14vulnerable
Susegpg2linux enterprise desktop 12 sp42.0.24-9.8.1fixed
Susegpg2linux enterprise server 12 sp42.0.24-9.8.1fixed
Susegpg2linux enterprise server for sap applications 12 sp42.0.24-9.8.1fixed
Susegpg2linux enterprise module for basesystem 152.2.5-4.11.1fixed
Susegpg2linux enterprise module for basesystem 15 sp12.2.5-4.11.1fixed
Opensusegpg2leap 15.02.2.5-lp151.6.3.1fixed
Opensusegpg2leap 15.12.2.5-lp151.6.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntugnupg2deb18.042.2.4-1ubuntu1.5Not reportedUSN-5431-1Not reported
Ubuntugnupg2deb18.042.2.4-1ubuntu1.5Not reportedUBUNTU-CVE-2019-13050Not reported
Susegpg2rpmlinux enterprise desktop 12 sp42.0.24-9.8.1Not reportedSUSE-SU-2019:2480-1Not reported
Susegpg2rpmlinux enterprise server 12 sp42.0.24-9.8.1Not reportedSUSE-SU-2019:2480-1Not reported
Susegpg2rpmlinux enterprise server for sap applications 12 sp42.0.24-9.8.1Not reportedSUSE-SU-2019:2480-1Not reported
Susegpg2rpmlinux enterprise module for basesystem 152.2.5-4.11.1Not reportedSUSE-SU-2019:2006-1Not reported
Susegpg2rpmlinux enterprise module for basesystem 15 sp12.2.5-4.11.1Not reportedSUSE-SU-2019:2006-1Not reported
Opensusegpg2rpmleap 15.02.2.5-lp151.6.3.1Not reportedOPENSUSE-SU-2019:1917-1Not reported
Opensusegpg2rpmleap 15.12.2.5-lp151.6.3.1Not reportedOPENSUSE-SU-2019:1917-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]