CVE-2019-13050
HIGH
7.5
CVSS Severity Score
Vulnerability Description
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.
Affected Platforms (CPE)
📦
Gnupg
Gnupg
<= 2.2.16📦
Sks Keyserver Project
Sks Keyserver
<= 1.2.0💻
Fedoraproject
Fedora
= 29💻
Fedoraproject
Fedora
= 30💻
Opensuse
Leap
= 15.0💻
Opensuse
Leap
= 15.1📦
F5