CVE:CVE-2018-12020
CNNVD:CNNVD-201806-580
GnuPG是GNU社区的一套开源的加密软件，采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。
GnuPG 2.2.8之前版本中的mainproc.c文件存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.6,and avoid the version 7.5,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,18.04,18.10,19.04,and avoid the version 12.04,14.04,16.04,17.10,18.04,18.10,19.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade gnupg gnupg to a higher version than 2.2.8,and avoid the version (,2.2.8)