[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPvFGduXLYkhVAoyVxsobEccFNk4nevc0N29u9t0wqGs":3,"g5a-risk:CVE-2018-12020":294},{"success":4,"data":5,"meta":292},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":110,"references":111,"referencesCount":193,"weaknesses":194,"weaknessesCount":203,"isActivelyExploited":204,"cisaInfo":26,"otxData":26,"relatedBlogPosts":205,"seoMetadata":206,"configurations":231,"relatedVendorCves":290,"notableEvents":291},"CVE-2018-12020","What is CVE-2018-12020?","mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the \"--status-fd 2\" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.","mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the outp...","2018-06-08T21:29:00.237","2022-04-18T17:30:54.32",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.08247,[41,41,41,41,39,39,39],0.08546,"High",[44,49,52,55,57,61,65,67,70,73,75,80,83,86,89,92,95,98,103,106],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"redhat","enterprise_linux_desktop","6.0","cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":45,"product":53,"version":47,"criteria":54,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":45,"product":53,"version":50,"criteria":56,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":45,"product":58,"version":59,"criteria":60,"vulnerable":4},"enterprise_linux_server_aus","7.6","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",{"vendor":45,"product":62,"version":63,"criteria":64,"vulnerable":4},"enterprise_linux_server_eus","7.5","cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*",{"vendor":45,"product":62,"version":59,"criteria":66,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",{"vendor":45,"product":68,"version":59,"criteria":69,"vulnerable":4},"enterprise_linux_server_tus","cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",{"vendor":45,"product":71,"version":47,"criteria":72,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",{"vendor":45,"product":71,"version":50,"criteria":74,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":78,"criteria":79,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",{"vendor":76,"product":77,"version":81,"criteria":82,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":76,"product":77,"version":84,"criteria":85,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":76,"product":77,"version":87,"criteria":88,"vulnerable":4},"17.10","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":90,"criteria":91,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":76,"product":77,"version":93,"criteria":94,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",{"vendor":76,"product":77,"version":96,"criteria":97,"vulnerable":4},"19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",{"vendor":99,"product":100,"version":101,"criteria":102,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":99,"product":100,"version":104,"criteria":105,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":107,"product":107,"version":108,"criteria":109,"vulnerable":4},"gnupg","*","cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*",20,[112,118,123,127,130,135,139,143,146,152,157,160,164,168,171,175,178,181,184,187,190],{"url":113,"source":114,"tags":115},"http:\u002F\u002Fopenwall.com\u002Flists\u002Foss-security\u002F2018\u002F06\u002F08\u002F2","Openwall",[116,117],"Mailing List","Third Party Advisory",{"url":119,"source":120,"tags":121},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152703\u002FJohnny-You-Are-Fired.html","Packetstormsecurity",[117,122],"VDB Entry",{"url":124,"source":125,"tags":126},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FApr\u002F38","Seclists",[116,117],{"url":128,"source":114,"tags":129},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F04\u002F30\u002F4",[116,117],{"url":131,"source":132,"tags":133},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104450","Securityfocus",[134],"Broken Link",{"url":136,"source":137,"tags":138},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041051","Securitytracker",[134],{"url":140,"source":141,"tags":142},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2180","Red Hat",[117],{"url":144,"source":141,"tags":145},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2181",[117],{"url":147,"source":148,"tags":149},"https:\u002F\u002Fdev.gnupg.org\u002FT4012","Gnupg",[150,151],"Patch","Vendor Advisory",{"url":153,"source":154,"tags":155},"https:\u002F\u002Fgithub.com\u002FRUB-NDS\u002FJohnny-You-Are-Fired","GitHub",[156,117],"Technical Description",{"url":158,"source":154,"tags":159},"https:\u002F\u002Fgithub.com\u002FRUB-NDS\u002FJohnny-You-Are-Fired\u002Fblob\u002Fmaster\u002Fpaper\u002Fjohnny-fired.pdf",[156,117],{"url":161,"source":162,"tags":163},"https:\u002F\u002Fhelp.ecostruxureit.com\u002Fdisplay\u002Fpublic\u002FUADCE725\u002FSecurity+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","Ecostruxureit",[117],{"url":165,"source":166,"tags":167},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F12\u002Fmsg00027.html","Debian",[116,117],{"url":169,"source":148,"tags":170},"https:\u002F\u002Flists.gnupg.org\u002Fpipermail\u002Fgnupg-announce\u002F2018q2\u002F000425.html",[116,151],{"url":172,"source":173,"tags":174},"https:\u002F\u002Fusn.ubuntu.com\u002F3675-1\u002F","Ubuntu",[117],{"url":176,"source":173,"tags":177},"https:\u002F\u002Fusn.ubuntu.com\u002F3675-2\u002F",[117],{"url":179,"source":173,"tags":180},"https:\u002F\u002Fusn.ubuntu.com\u002F3675-3\u002F",[117],{"url":182,"source":173,"tags":183},"https:\u002F\u002Fusn.ubuntu.com\u002F3964-1\u002F",[117],{"url":185,"source":166,"tags":186},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4222",[117],{"url":188,"source":166,"tags":189},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4223",[117],{"url":191,"source":166,"tags":192},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4224",[117],21,[195],{"id":196,"name":197,"description":198,"extendedDescription":199,"status":200,"abstraction":201,"structure":202},"CWE-706","Use of Incorrectly-Resolved Name or Reference","The product uses a name or reference to access a resource, but the name\u002Freference resolves to a resource that is outside of the intended control sphere.","","Incomplete","Class","Simple",1,false,[],{"title":207,"metaDescription":208,"keywords":209,"canonicalUrl":210,"structuredData":211},"What is CVE-2018-12020? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-12020, a high severity cyber security vulnerability from 2018. mainproc.c in GnuPG before 2.2.8 mishandles the original fi...","CVE-2018-12020, CVE-2018-12020 vulnerability, CVE-2018-12020 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, redhat security, enterprise_linux_desktop vulnerability, enterprise_linux_server vulnerability, enterprise_linux_server_aus vulnerability, enterprise_linux_server_eus vulnerability, enterprise_linux_server_tus vulnerability","\u002Fwhat-is\u002Fcve-2018-12020",{"@context":212,"@type":213,"headline":207,"description":208,"datePublished":10,"dateModified":11,"author":214,"publisher":218,"about":222,"mainEntityOfPage":226,"articleSection":229,"keywords":230},"https:\u002F\u002Fschema.org","TechArticle",{"@type":215,"name":216,"url":217},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":215,"name":216,"url":217,"logo":219},{"@type":220,"url":221},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":223,"name":6,"description":224,"additionalType":225},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":227,"@id":228},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-12020","Cybersecurity","CVE-2018-12020, CVE-2018-12020 vulnerability, CVE-2018-12020 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[232,257,275,283],{"Operator":26,"Negate":26,"Nodes":233},[234],{"Operator":235,"Negate":26,"CPEMatch":236},"OR",[237,239,241,243,245,247,249,251,253,255],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":238,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":240,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":242,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":244,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B353CE99-D57C-465B-AAB0-73EF581127D1",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":248,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":250,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BF77CDCF-B9C9-427D-B2BF-36650FB2148C",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":254,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E5ED5807-55B7-47C5-97A6-03233F4FBC3A",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":256,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"825ECE2D-E232-46E0-A047-074B34DB1E97",{"Operator":26,"Negate":26,"Nodes":258},[259],{"Operator":235,"Negate":26,"CPEMatch":260},[261,263,265,267,269,271,273],{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":262,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8D305F7A-D159-4716-AB26-5E38BB5CD991",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":264,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":266,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":268,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9070C9D8-A14A-467F-8253-33B966C16886",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":270,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":272,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07C312A0-CD2C-4B9C-B064-6409B25C278F",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":274,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",{"Operator":26,"Negate":26,"Nodes":276},[277],{"Operator":235,"Negate":26,"CPEMatch":278},[279,281],{"Vulnerable":4,"Criteria":102,"MatchCriteriaID":280,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":105,"MatchCriteriaID":282,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":26,"Negate":26,"Nodes":284},[285],{"Operator":235,"Negate":26,"CPEMatch":286},[287],{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":288,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":289,"VersionEndIncluding":26},"BCFABF1A-E57D-4323-9753-FE66CA95DEA9","2.2.8",[],[],{"lastModified":11,"cacheTime":293,"version":32},1792364714725,{"score":295,"band":296,"action":297,"scoredAt":298},48,"Medium","Plan remediation","2026-10-16T06:44:12.505809+00:00"]