CVE-2001-0522

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-08-14 · updated 2026-06-16

Description

Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.

Affected products

GNU Privacy Guard: 7.1, 7.2, 8.0

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399
http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01
http://online.securityfocus.com/archive/1/188218
http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt
http://www.debian.org/security/2001/dsa-061
http://www.gnupg.org/whatsnew.html#rn20010529
http://www.kb.cert.org/vuls/id/403051
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3
http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.html
http://www.osvdb.org/1845
http://www.redhat.com/support/errata/RHSA-2001-073.html
http://www.securityfocus.com/bid/2797

Get alerted when CVE-2001-0522 or the next vulnerability affects your stack