NVD

Id
48691  
Name
CVE-2009-1415  
Description
lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a malformed DSA key that triggers a (1) free of an uninitialized pointer or (2) double free.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-04-30  
Modified Date
2009-06-10  
Seq
2009-1415  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245975 48691 CVE-2009-1415 [gnutls-devel] 20090430 Double free and free of invalid pointer on certain errors [GNUTLS-SA-2009-1] [CVE-2009-1415]  View
245976 48691 CVE-2009-1415 [gnutls-devel] 20090423 Re: some crashes on using DSA keys  View
245977 48691 CVE-2009-1415 GLSA-200905-04  View
245978 48691 CVE-2009-1415 http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3488  View
245979 48691 CVE-2009-1415 MDVSA-2009:116  View
245980 48691 CVE-2009-1415 34783  View
245981 48691 CVE-2009-1415 1022157  View
245982 48691 CVE-2009-1415 ADV-2009-1218  View
245983 48691 CVE-2009-1415 gnutls-dsa-code-execution(50257)  View
245984 48691 CVE-2009-1415 gnutls-dsa-dos(50260)  View
245985 48691 CVE-2009-1415 gnutls-libgnutls-dos(50445)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42350 JVNDB-2009-003357 GnuTLS の libgnutls の lib/pk-libgcrypt.c におけるサービス運用妨害 (DoS) の脆弱性 GnuTLS の libgnutls の lib/pk-libgcrypt.c は、無効な DSA 署名を適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2009-1415 38846 CVE-2009-1415 48691 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003357.html 2009-04-30 2012-06-26 View