CVE-2019-13050: F5 Traffix Signaling Delivery Controller

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.

Affected products

  • F5 Traffix Signaling Delivery Controller: from 5.0.0, up to and including 5.1.0
  • Fedoraproject Fedora: version 29 only; version 30 only
  • Gnupg Gnupg: up to and including 2.2.16
  • Opensuse Leap: version 15.0 only; version 15.1 only
  • Sks Keyserver Project Sks Keyserver: up to and including 1.2.0

Published 2019-06-29. Last modified 2026-06-17.