NVD

Id
61765  
Name
CVE-2006-3082  
Description
parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-06-19  
Modified Date
2011-03-07  
Seq
2006-3082  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319687 61765 CVE-2006-3082 20060701-01-U  View
319688 61765 CVE-2006-3082 http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157  View
319689 61765 CVE-2006-3082 oval:org.mitre.oval:def:10089  View
319690 61765 CVE-2006-3082 20060531 GnuPG fun  View
319691 61765 CVE-2006-3082 20060531 RE: GnuPG fun  View
319692 61765 CVE-2006-3082 20060601 Re: GnuPG fun  View
319693 61765 CVE-2006-3082 1016519  View
319694 61765 CVE-2006-3082 SSA:2006-178-02  View
319695 61765 CVE-2006-3082 http://support.avaya.com/elmodocs2/security/ASA-2006-167.htm  View
319696 61765 CVE-2006-3082 DSA-1107  View
319697 61765 CVE-2006-3082 DSA-1115  View
319698 61765 CVE-2006-3082 MDKSA-2006:110  View
319699 61765 CVE-2006-3082 SUSE-SR:2006:018  View
319700 61765 CVE-2006-3082 SUSE-SR:2006:015  View
319701 61765 CVE-2006-3082 OpenPKG-SA-2006.010  View
319702 61765 CVE-2006-3082 RHSA-2006:0571  View
319703 61765 CVE-2006-3082 20060629 rPSA-2006-0120-1 gnupg  View
319704 61765 CVE-2006-3082 18554  View
319705 61765 CVE-2006-3082 USN-304-1  View
319706 61765 CVE-2006-3082 ADV-2006-2450  View
319707 61765 CVE-2006-3082 gnupg-parsepacket-bo(27245)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58158 JVNDB-2006-000354 GnuPG の parse_user_id() 関数における整数オーバーフローの脆弱性 GnuPG の parse-packet.c に実装される parse_user_id() 関数には、パケット長に対するチェックが不適切であるため、異常に長いユーザ ID を処理した場合に整数オーバーフローが発生する脆弱性が存在します。 CVE-2006-3082 19184 CVE-2006-3082 61765 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000354.html 2006-06-20 2007-04-01 View