CVE-2006-5111
6.5 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.05 Low
EPSS
Percentile
92.8%
The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libksba_library:libksba_library | libksba library | eq | 0.9.12 |
References
secunia.com/advisories/22423
secunia.com/advisories/22445
secunia.com/advisories/22473
www.mandriva.com/security/advisories?name=MDKSA-2006:183
www.novell.com/linux/download/updates/101_x86_64.html
www.novell.com/linux/security/advisories/2006_23_sr.html
www.securityfocus.com/bid/20565
www.ubuntu.com/usn/usn-365-1
exchange.xforce.ibmcloud.com/vulnerabilities/29621
Related
6.5 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.05 Low
EPSS
Percentile
92.8%