CVE-2014-1929

published 2014-10-25

CVE-2014-1929: python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional…

Priority P4 15 medium 4.4 CVSS 2.0

AV L AC M Au N C P I P A P

python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	python-gnupg	< python-gnupg 0.3.6-1 (bookworm)	python-gnupg 0.3.6-1 (bookworm)
python-gnupg_project	python-gnupg	—	—
python-gnupg_project	python-gnupg	—	—
python-gnupg_project	python-gnupg	>= 0 < 0.3.6-1	0.3.6-1
python-gnupg_project	python-gnupg	>= 0 < 0.3.6-1	0.3.6-1
python-gnupg_project	python-gnupg	>= 0 < 0.3.6-1	0.3.6-1
python-gnupg_project	python-gnupg	>= 0 < 0.3.6-1	0.3.6-1
python-gnupg_project	python-gnupg	>= 0.3.5 < 0.3.7	0.3.7

CVSS provenance

nvd v2.0 4.4 MEDIUM AV:L/AC:M/Au:N/C:P/I:P/A:P

ghsa 7.5 HIGH

osv 7.5 HIGH

vendor_debian 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20