CVE-2014-1929

Severity: medium (CVSS 4.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-25 · updated 2026-06-17
Weakness: CWE-20

Description

python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

Affected products

Python-Gnupg Project Python-Gnupg: 0.3.5, 0.3.6

References

http://seclists.org/oss-sec/2014/q1/245
http://seclists.org/oss-sec/2014/q1/335
http://secunia.com/advisories/59031
http://www.debian.org/security/2014/dsa-2946
http://seclists.org/oss-sec/2014/q1/245
http://seclists.org/oss-sec/2014/q1/335
http://secunia.com/advisories/59031
http://www.debian.org/security/2014/dsa-2946

Get alerted when CVE-2014-1929 or the next vulnerability affects your stack