NVD

Id
47035  
Name
CVE-2012-6085  
Description
The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-01-23  
Modified Date
2014-01-03  
Seq
2012-6085  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235559 47035 CVE-2012-6085 http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=f0b33b6fb8e0586e9584a7a409dcc31263776a67  View
235560 47035 CVE-2012-6085 FEDORA-2013-0148  View
235561 47035 CVE-2012-6085 FEDORA-2013-0377  View
235562 47035 CVE-2012-6085 RHSA-2013:1459  View
235563 47035 CVE-2012-6085 MDVSA-2013:001  View
235564 47035 CVE-2012-6085 [oss-security] 20130101 Re: GnuPG 1.4.12 and lower - memory access errors and keyring database corruption  View
235565 47035 CVE-2012-6085 57102  View
235566 47035 CVE-2012-6085 USN-1682-1  View
235567 47035 CVE-2012-6085 gnupg-public-keys-code-exec(80990)  View
235568 47035 CVE-2012-6085 https://bugs.g10code.com/gnupg/issue1455  View
235569 47035 CVE-2012-6085 https://bugzilla.redhat.com/show_bug.cgi?id=891142  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30208 JVNDB-2012-005915 GnuPG の g10/import.c における公開鍵リングのデータベースを破壊される脆弱性 GnuPG の g10/import.c 内の read_block 関数には、鍵をインポートする際、公開鍵リングのデータベースを破壊される、またはサービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-6085 59323 CVE-2012-6085 47035 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005915.html 2012-12-06 2013-01-25 View