CVE-2005-2023

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-06-17 · updated 2026-06-16

Description

The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail.

Affected products

Suse Linux: 9.3

References

http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002291.html
http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002294.html
http://www.novell.com/linux/security/advisories/2005_16_sr.html
https://lists.gnupg.org/pipermail/gpa-dev/2005-May/002284.html
http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002291.html
http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002294.html
http://www.novell.com/linux/security/advisories/2005_16_sr.html
https://lists.gnupg.org/pipermail/gpa-dev/2005-May/002284.html

Get alerted when CVE-2005-2023 or the next vulnerability affects your stack