QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-3082

Back to search

CVE-2006-3082

Published: Jun 19, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.

VendorProductVersions

n/a

n/a

affected
n/a

References

20899
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10089
vdb-entry
signature
x_refsource_OVAL
20968
third-party-advisory
x_refsource_SECUNIA
20881
third-party-advisory
x_refsource_SECUNIA
20060629 rPSA-2006-0120-1 gnupg
mailing-list
x_refsource_BUGTRAQ
20783
third-party-advisory
x_refsource_SECUNIA
DSA-1107
vendor-advisory
x_refsource_DEBIAN
20811
third-party-advisory
x_refsource_SECUNIA
SUSE-SR:2006:018
vendor-advisory
x_refsource_SUSE
20060531 RE: GnuPG fun
mailing-list
x_refsource_FULLDISC
21063
third-party-advisory
x_refsource_SECUNIA
21135
third-party-advisory
x_refsource_SECUNIA
20829
third-party-advisory
x_refsource_SECUNIA
ADV-2006-2450
vdb-entry
x_refsource_VUPEN
20060601 Re: GnuPG fun
mailing-list
x_refsource_FULLDISC
20801
third-party-advisory
x_refsource_SECUNIA
20060531 GnuPG fun
mailing-list
x_refsource_FULLDISC
18554
vdb-entry
x_refsource_BID
USN-304-1
vendor-advisory
x_refsource_UBUNTU
SUSE-SR:2006:015
vendor-advisory
x_refsource_SUSE
RHSA-2006:0571
vendor-advisory
x_refsource_REDHAT
MDKSA-2006:110
vendor-advisory
x_refsource_MANDRIVA
DSA-1115
vendor-advisory
x_refsource_DEBIAN
OpenPKG-SA-2006.010
vendor-advisory
x_refsource_OPENPKG
21137
third-party-advisory
x_refsource_SECUNIA
21143
third-party-advisory
x_refsource_SECUNIA
21585
third-party-advisory
x_refsource_SECUNIA
1016519
vdb-entry
x_refsource_SECTRACK
SSA:2006-178-02
vendor-advisory
x_refsource_SLACKWARE
gnupg-parsepacket-bo(27245)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now