VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 20, 2014· Updated Jun 17, 2026

CVE-2014-3564

CVE-2014-3564

Description

Multiple heap-based buffer overflows in the status_handler function in (1) engine-gpgsm.c and (2) engine-uiserver.c in GPGME before 1.5.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "different line lengths in a specific order."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • GNU/Gpgme
    cpe:2.3:a:gnu:gpgme:*:*:*:*:*:*:*:*
    Range: <=1.5.0
  • Canonical/Ubuntu Linux2 versions
    cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*+ 1 more
    • cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
  • GPGME/GPGMEllm-create
    Range: <1.5.1

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.