CVE-2005-0366: Gnupg

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

The integrity check feature in OpenPGP, when handling a message that was encrypted using cipher feedback (CFB) mode, allows remote attackers to recover part of the plaintext via a chosen-ciphertext attack when the first 2 bytes of a message block are known, and an oracle or other mechanism is available to determine whether an integrity check failed.

Affected products

• Gnupg Gnupg: before 1.4.1 (fixed in 1.4.1)

Published 2005-05-02. Last modified 2026-06-16.