Sanitize/validate GPG payload in sd-svs prior to sending to sd-gpg (https://github.com/freedomofpress/securedrop-client/issues/433) proposed
MITIGQW16 · Proposed: Not in place yet. Being considered. · Defined in mitigations.py:825
Whether to apply it is unclear: Unclear.
Threats it mitigates
No threat lists this mitigation.
Possible further mitigation for
| Threat | Status | Risk | After mitigations |
|---|---|---|---|
| Attacker obtains code execution in the GPG VM THREATQW6 | partially mitigated | 6 medium | 2 low |
| GPG VM (sd-gpg) performs attacker file decryption THREATQW7 | mitigated | 6 medium | 2 low |