USN-8720-1: GnuPG vulnerability
AI Summary
It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks.
Discussion
Sign in to join the discussion.
Loading comments…