CVE-2006-3082
- State
- Published
- Severity
- Not scored
- Published
- Jun 19, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jun 19, 2006
Description
parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20899third-party-advisory
- oval:org.mitre.oval:def:10089vdb-entrysignature
- 20968third-party-advisory
- 20881third-party-advisory
- http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157
- 20060629 rPSA-2006-0120-1 gnupgmailing-list
- 20783third-party-advisory
- DSA-1107vendor-advisory
- 20811third-party-advisory
- SUSE-SR:2006:018vendor-advisory
- 20060531 RE: GnuPG funmailing-list
- 21063third-party-advisory
- 21135third-party-advisory
- 20829third-party-advisory
- ADV-2006-2450vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm
- 20060601 Re: GnuPG funmailing-list
- 20801third-party-advisory
- 20060531 GnuPG funmailing-list
- 18554vdb-entry
- USN-304-1vendor-advisory
- SUSE-SR:2006:015vendor-advisory
- RHSA-2006:0571vendor-advisory
- MDKSA-2006:110vendor-advisory
- DSA-1115vendor-advisory
- OpenPKG-SA-2006.010vendor-advisory
- 21137third-party-advisory
- 21143third-party-advisory
- 21585third-party-advisory
- 1016519vdb-entry
- SSA:2006-178-02vendor-advisory
- gnupg-parsepacket-bo(27245)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.