NVD

Id
14005  
Name
CVE-2010-2547  
Description
Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-08-05  
Modified Date
2010-12-10  
Seq
2010-2547  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77604 14005 CVE-2010-2547 FEDORA-2010-11413  View
77605 14005 CVE-2010-2547 [gnupg-announce] 20100723 [Announce] Security Alert for GnuPG 2.0 - Realloc bug in GPGSM  View
77606 14005 CVE-2010-2547 SUSE-SR:2010:020  View
77607 14005 CVE-2010-2547 SSA:2010-240-01  View
77608 14005 CVE-2010-2547 http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0076  View
77609 14005 CVE-2010-2547 DSA-2076  View
77610 14005 CVE-2010-2547 MDVSA-2010:143  View
77611 14005 CVE-2010-2547 41945  View
77612 14005 CVE-2010-2547 1024247  View
77613 14005 CVE-2010-2547 ADV-2010-1931  View
77614 14005 CVE-2010-2547 ADV-2010-1950  View
77615 14005 CVE-2010-2547 ADV-2010-1988  View
77616 14005 CVE-2010-2547 ADV-2010-2217  View
77617 14005 CVE-2010-2547 ADV-2010-3125  View
77618 14005 CVE-2010-2547 https://issues.rpath.com/browse/RPL-3229  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36113 JVNDB-2010-001893 GnuPG の kbx/keybox-blob.c における任意のコードを実行される脆弱性 GnuPG の GPGSM 内にある kbx/keybox-blob.c には、Subject Alternative Names に関する処理に不備があり、証明書のインポートおよび署名の検証の際、realloc 操作を適切に行わないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-2547 45127 CVE-2010-2547 14005 5.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001893.html 2010-07-23 2010-08-30 View