Lucene search

MitreCVE-2006-5111

HistoryOct 03, 2006 - 4:03 a.m.

CVE-2006-5111

2006-10-0304:03:00

mitre

web.nvd.nist.gov

libksba

gpgsm

denial of service

application crash

x.509 certificate

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0.05

Percentile

92.9%

JSON

The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature.

Affected configurations

Nvd

Node

libksba_librarylibksba_libraryMatch0.9.12

VendorProductVersionCPE
libksba_librarylibksba_library0.9.12cpe:2.3:a:libksba_library:libksba_library:0.9.12:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libksba_library	libksba_library	0.9.12	cpe:2.3:a:libksba_library:libksba_library:0.9.12:::::::*

References

secunia.com/advisories/22423

secunia.com/advisories/22445

secunia.com/advisories/22473

www.mandriva.com/security/advisories?name=MDKSA-2006:183

www.novell.com/linux/download/updates/101_x86_64.html

www.novell.com/linux/security/advisories/2006_23_sr.html

www.securityfocus.com/bid/20565

www.ubuntu.com/usn/usn-365-1

exchange.xforce.ibmcloud.com/vulnerabilities/29621

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

High

EPSS

0.05

Percentile

92.9%

JSON

Related for CVE-2006-5111