National Cyber-Alert System

Vulnerability Summary for CVE-2006-3082

Overview

parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: UBUNTU

Name: USN-304-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-304-1

External Source: BID

Name: 18554

Type: Advisory

Hyperlink:http://www.securityfocus.com/bid/18554

External Source: BUGTRAQ

Name: 20060629 rPSA-2006-0120-1 gnupg

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/438751/100/0/threaded

External Source: SUSE

Name: SUSE-SR:2006:015

Hyperlink:http://www.novell.com/linux/security/advisories/2006_38_security.html

External Source: VUPEN

Name: ADV-2006-2450

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/2450

External Source: DEBIAN

Name: DSA-1107

Hyperlink:http://www.debian.org/security/2006/dsa-1107

External Source: SLACKWARE

Name: SSA:2006-178-02

Hyperlink:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.457382

External Source: SECUNIA

Name: 20968

Type: Advisory

Hyperlink:http://secunia.com/advisories/20968

External Source: SECUNIA

Name: 20899

Type: Advisory

Hyperlink:http://secunia.com/advisories/20899

External Source: SECUNIA

Name: 20881

Type: Advisory

Hyperlink:http://secunia.com/advisories/20881

External Source: SECUNIA

Name: 20829

Type: Advisory

Hyperlink:http://secunia.com/advisories/20829

External Source: SECUNIA

Name: 20811

Type: Advisory

Hyperlink:http://secunia.com/advisories/20811

External Source: SECUNIA

Name: 20801

Type: Advisory

Hyperlink:http://secunia.com/advisories/20801

External Source: SECUNIA

Name: 20783

Type: Advisory

Hyperlink:http://secunia.com/advisories/20783

External Source: FULLDISC

Name: 20060601 Re: GnuPG fun

Hyperlink:http://seclists.org/lists/fulldisclosure/2006/May/0789.html

External Source: FULLDISC

Name: 20060531 RE: GnuPG fun

Hyperlink:http://seclists.org/lists/fulldisclosure/2006/May/0782.html

External Source: FULLDISC

Name: 20060531 GnuPG fun

Hyperlink:http://seclists.org/lists/fulldisclosure/2006/May/0774.html

External Source: MANDRIVA

Name: MDKSA-2006:110

Hyperlink:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:110

External Source: CONFIRM

Name: http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157

Hyperlink:http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157

External Source: XF

Name: gnupg-parsepacket-bo(27245)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27245

External Source: REDHAT

Name: RHSA-2006:0571

Hyperlink:http://www.redhat.com/support/errata/RHSA-2006-0571.html

External Source: OPENPKG

Name: OpenPKG-SA-2006.010

Hyperlink:http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.010.html

External Source: SUSE

Name: SUSE-SR:2006:018

Hyperlink:http://www.novell.com/linux/security/advisories/2006_18_sr.html

External Source: MANDRIVA

Name: MDKSA-2006:110

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2006:110

External Source: DEBIAN

Name: DSA-1115

Hyperlink:http://www.debian.org/security/2006/dsa-1115

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm

External Source: SECTRACK

Name: 1016519

Hyperlink:http://securitytracker.com/id?1016519

External Source: SECUNIA

Name: 21585

Hyperlink:http://secunia.com/advisories/21585

External Source: SECUNIA

Name: 21143

Hyperlink:http://secunia.com/advisories/21143

External Source: SECUNIA

Name: 21137

Hyperlink:http://secunia.com/advisories/21137

External Source: SECUNIA

Name: 21135

Hyperlink:http://secunia.com/advisories/21135

External Source: SECUNIA

Name: 21063

Hyperlink:http://secunia.com/advisories/21063

External Source: SGI

Name: 20060701-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U