Ubuntu: Security Advisory (USN-970-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 : gnupg2 (CESA-2010:0603)

An updated gnupg2 package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gnupg2 security update

CentOS Errata and Security Advisory CESA-2010:0603 An updated gnupg2 package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

RedHat Update for gnupg2 RHSA-2010:0603-01

Check for the Version of gnupg2 OpenVAS Vulnerability Test RedHat Update for gnupg2 RHSA-2010:0603-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc...

CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc...

CVE-2010-2547

GnuPG 2.x is affected by CVE-2010-2547: a use-after-free in gpgsm/kbx-blob.c when importing or verifying a certificate with a large number of Subject Alternative Names can be exploited to crash the process or possibly execute arbitrary code. Impact is a denial of service with potential remote cod...

CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc...

Moderate: Red Hat Security Advisory: gnupg2 security update

An updated gnupg2 package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Fedora 13 : gnupg2-2.0.14-4.fc13 (2010-11413)

Fri Jul 23 2010 Rex Dieter - 2.0.14-4 - gpgsm realloc patch - Fri Jun 18 2010 Tomas Mraz - 2.0.14-3 - initialize small amount of secmem for list of algorithms in help 598847 necessary in the FIPS mode of libgcrypt Note that Tenable Network Security has extracted the preceding description block...

Mandriva Update for gnupg2 MDVSA-2010:143 (gnupg2)

Check for the Version of gnupg2 OpenVAS Vulnerability Test Mandriva Update for gnupg2 MDVSA-2010:143 gnupg2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for gnupg2 MDVSA-2010:143 (gnupg2)

Check for the Version of gnupg2 OpenVAS Vulnerability Test Mandriva Update for gnupg2 MDVSA-2010:143 gnupg2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

SuSE9 Security Update : newpg (YOU Patch Number 11190)

The gpgsm program crashed when verifying a signature with certain malformed x.509 certificates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41096;...

SuSE9 Security Update : libksba (YOU Patch Number 11222)

The gpgsm program, which uses the libksba library, crashes when verifying a signature with certain malformed X.509 certificates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : libksba (ZYPP Patch Number 1867)

The gpgsm program which uses the libksba library crashed when verifying a signature with certain malformed x.509 certificates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

openSUSE 10 Security Update : libksba (libksba-1866)

The gpgsm program which uses the libksba library crashed when verifying a signature with certain malformed x.509 certificates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libksba-1866. The...

CVE-2006-5111

The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service application crash via a malformed X.509 certificate in a signature...

DEBIAN-CVE-2006-5111

The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service application crash via a malformed X.509 certificate in a signature...

CVE-2006-5111

The CVE-2006-5111 issue affects libksba (reported as 0.9.12 and possibly other versions) used by gpgsm in the SUSE-like newpg package, allowing an attacker to trigger a denial of service (application crash) by processing a malformed X.509 certificate in a signature. The vulnerability is confirmed...

CVE-2006-5111

The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service application crash via a malformed X.509 certificate in a signature...