Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-2547HistoryAug 05, 2010 - 6:17 p.m.
CVE-2010-2547
2010-08-0518:17:00
Debian Security Bug Tracker
security-tracker.debian.org
11
0.127 Low
EPSS
Percentile
95.5%
Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | gnupg2 | <Â 2.0.14-2 | gnupg2_2.0.14-2_all.deb |
| Debian | 11 | all | gnupg2 | <Â 2.0.14-2 | gnupg2_2.0.14-2_all.deb |
| Debian | 10 | all | gnupg2 | <Â 2.0.14-2 | gnupg2_2.0.14-2_all.deb |
| Debian | 999 | all | gnupg2 | <Â 2.0.14-2 | gnupg2_2.0.14-2_all.deb |
| Debian | 13 | all | gnupg2 | <Â 2.0.14-2 | gnupg2_2.0.14-2_all.deb |
Related
openvas
openvas
RedHat Update for gnupg2 RHSA-2010:0603-01
2010-08-06 00:00:00
Ubuntu Update for gnupg2 vulnerability USN-970-1
2010-08-13 00:00:00
Mandriva Update for gnupg2 MDVSA-2010:143 (gnupg2)
2010-08-02 00:00:00
nessus
nessus
CentOS 5 : gnupg2 (CESA-2010:0603)
2010-08-09 00:00:00
openSUSE Security Update : gpg2 (openSUSE-SU-2010:0479-1)
2010-08-06 00:00:00
Mandriva Linux Security Advisory : gnupg2 (MDVSA-2010:143)
2010-08-02 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2076-1] New gnupg2 packages fix potential code execution
2010-07-28 00:00:00
PgnuPG use-after-free vulnerability
2010-07-28 00:00:00
oraclelinux
oraclelinux
gnupg2 security update
2010-08-04 00:00:00
cve
cve
CVE-2010-2547
2010-08-05 18:17:00
debian
debian
[SECURITY] [DSA 2076-1] New gnupg2 packages fix potential code execution
2010-07-27 20:04:59
redhat
redhat
(RHSA-2010:0603) Moderate: gnupg2 security update
2010-08-04 00:00:00
prion
prion
Design/Logic Flaw
2010-08-05 18:17:00
ubuntucve
ubuntucve
CVE-2010-2547
2010-08-05 00:00:00
centos
centos
gnupg2 security update
2010-08-06 11:35:05
slackware
slackware
[slackware-security] gnupg2
2010-08-28 16:52:10
cvelist
cvelist
CVE-2010-2547
2010-08-05 18:00:00
ubuntu
ubuntu
GnuPG2 vulnerability
2010-08-11 00:00:00
gentoo
gentoo
GnuPG: User-assisted execution of arbitrary code
2011-10-22 00:00:00