CVE-2014-3564
Last modified
CVE-2014-3564 is a vulnerability of currently unknown severity. Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order.". EPSS estimates a 4.29% chance of exploitation in the next 30 days.
Description
Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Gpgme | <= 1.5.0 |
| Canonical | Ubuntu Linux | 10.04 |
| Canonical | Ubuntu Linux | 12.04 |
| Debian | Debian Linux | 6.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-3564?
How severe is CVE-2014-3564?
How do I fix CVE-2014-3564?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-3558ReflectionHelper (org.hibernate.validator.util.ReflectionHel…
- CVE-2014-3559The oVirt storage backend in Red Hat Enterprise Virtualizati…
- CVE-2014-3560NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.…
- CVE-2014-3561The rhevm-log-collector package in Red Hat Enterprise Virtua…
- CVE-2014-3562Red Hat Directory Server 8 and 389 Directory Server, when de…
- CVE-2014-3563Multiple unspecified vulnerabilities in Salt (aka SaltStack)…
- CVE-2014-3565snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ op…
- CVE-2014-3566The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and …3.4
- CVE-2014-3567Memory leak in the tls_decrypt_ticket function in t1_lib.c i…
- CVE-2014-3568OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 befor…
- CVE-2014-3569The ssl23_get_client_hello function in s23_srvr.c in OpenSSL…
- CVE-2014-3570The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 b…
Are you affected by CVE-2014-3564?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST