Description
python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.
References (4)
Core 4
Core References
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2014/dsa-2946
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q1/245
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q1/335
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59031
Scores
EPSS
0.0038
EPSS Percentile
30.3%
Details
CWE
CWE-20
Status
published
Products (3)
pypi/python-gnupg
0.3.5 - 0.3.7PyPI
python-gnupg_project/python-gnupg
0.3.5
python-gnupg_project/python-gnupg
0.3.6
Published
Oct 25, 2014
Tracked Since
Feb 18, 2026