Ubuntu Security Notice (C) 2013-2014 Canonical, Inc. / NASL script (C) 2013-2014 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related patches.
Daniel Kahn Gillmor discovered that GnuPG treated keys with empty
usage flags as being valid for all usages. (CVE-2013-4351)
Taylor R Campbell discovered that GnuPG incorrectly handled certain
OpenPGP messages. If a user or automated system were tricked into
processing a specially crafted message, GnuPG could consume resources,
resulting in a denial of service. (CVE-2013-4402).
Update the affected gnupg and / or gnupg2 packages.
Risk factor :
Medium / CVSS Base Score : 5.8
CVSS Temporal Score : 5.0
Public Exploit Available : false