CVE-2018-12020 Other in n/a
Attackers can spoof GnuPG status output via crafted filenames when using status-fd, potentially bypassing signature verification checks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-12020?
CVE-2018-12020 is a high-severity vulnerability in Canonical Ubuntu Linux, published on 8 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.
Weakness: CWE-706
Which versions are affected by CVE-2018-12020?
It affects 9 products.
Linux distribution packages (40)
gnupg2 Red Hat:enterprise_linux:6::client | All versions | 0:2.0.14-9.el6_10 |
gnupg2-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:2.0.14-9.el6_10 |
gnupg2-smime Red Hat:enterprise_linux:6::client | All versions | 0:2.0.14-9.el6_10 |
gnupg2 Red Hat:enterprise_linux:6::computenode | All versions | 0:2.0.14-9.el6_10 |
gnupg2-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:2.0.14-9.el6_10 |
gnupg2-smime Red Hat:enterprise_linux:6::computenode | All versions | 0:2.0.14-9.el6_10 |
gnupg2 Red Hat:enterprise_linux:6::server | All versions | 0:2.0.14-9.el6_10 |
gnupg2-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:2.0.14-9.el6_10 |
gnupg2-smime Red Hat:enterprise_linux:6::server | All versions | 0:2.0.14-9.el6_10 |
gnupg2 Red Hat:enterprise_linux:6::workstation | All versions | 0:2.0.14-9.el6_10 |
gnupg2-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:2.0.14-9.el6_10 |
gnupg2-smime Red Hat:enterprise_linux:6::workstation | All versions | 0:2.0.14-9.el6_10 |
gnupg2 Red Hat:enterprise_linux:7::client | All versions | 0:2.0.22-5.el7_5 |
gnupg2-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:2.0.22-5.el7_5 |
gnupg2-smime Red Hat:enterprise_linux:7::client | All versions | 0:2.0.22-5.el7_5 |
gnupg2 Red Hat:enterprise_linux:7::computenode | All versions | 0:2.0.22-5.el7_5 |
gnupg2-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:2.0.22-5.el7_5 |
gnupg2-smime Red Hat:enterprise_linux:7::computenode | All versions | 0:2.0.22-5.el7_5 |
gnupg2 Red Hat:enterprise_linux:7::server | All versions | 0:2.0.22-5.el7_5 |
gnupg2-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:2.0.22-5.el7_5 |
gnupg2-smime Red Hat:enterprise_linux:7::server | All versions | 0:2.0.22-5.el7_5 |
gnupg2 Red Hat:enterprise_linux:7::workstation | All versions | 0:2.0.22-5.el7_5 |
gnupg2-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:2.0.22-5.el7_5 |
gnupg2-smime Red Hat:enterprise_linux:7::workstation | All versions | 0:2.0.22-5.el7_5 |
gpg2 SUSE:Enterprise Storage 4 | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 2.2.5-4.3.1 |
gpg2 SUSE:Linux Enterprise Point of Sale 11 SP3 | All versions | 2.0.9-25.33.42.3.1 |
gpg2 SUSE:Linux Enterprise Server 11 SP3-LTSS | All versions | 2.0.9-25.33.42.3.1 |
gpg2 SUSE:Linux Enterprise Server 11 SP3-TERADATA | All versions | 2.0.9-25.33.42.3.1 |
gpg2 SUSE:Linux Enterprise Server 11 SP4 | All versions | 2.0.9-25.33.42.3.1 |
gpg2 SUSE:Linux Enterprise Server 12 SP1-LTSS | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Server 12 SP2-BCL | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Server 12 SP3 | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Server 12-LTSS | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 2.0.9-25.33.42.3.1 |
gpg2 SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 2.0.24-9.3.1 |
gpg2 SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 2.0.24-9.3.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Gnupg Gnupg, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus and 3 more.
How do I fix CVE-2018-12020?
Upgrade to a fixed version.
Is CVE-2018-12020 being exploited?
There is no known exploitation of CVE-2018-12020 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2018-12020, CLEANSTART-2026-SJ88469, DEBIAN-CVE-2018-12020, DSA-4222-1, DSA-4223-1, DSA-4224-1 and 10 more.