Unscored severity · published Dec 7, 2006
CVE-2006-6235
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP…
–
CVSS
5.9%
EPSS
No
On KEV
Description
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
4.0; 4.0; 4.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
3.0; 4.0 · source: NVD
FC
Fedora Core · Redhat
core_5.0; core6 · source: NVD
GP
Gpg4win · Gpg4win
1.0.7 · source: NVD
LI
Linux · Rpath
1 · source: NVD
LA
Linux Advanced Workstation · Redhat
2.1 · source: NVD
PG
Privacy Guard · Gnu
1.2.4; 1.2.5; 1.2.6; 1.2.7; 1.3.3; 1.3.4; +13 more · source: NVD
SL
Slackware Linux · Slackware
11.0 · source: NVD
UL
Ubuntu Linux · Ubuntu
5.10; 6.06 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6235
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6235
lists.gnupg.org
http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html
lists.suse.com
http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html
Patch
http://secunia.com/advisories/23245
Patch
http://secunia.com/advisories/23250
Patch
http://secunia.com/advisories/23255
More from Privacy Guard
–
CVE-2006-0049
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a…
–
CVE-2006-0455
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a…
–
CVE-2003-0978
Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious…
–
CVE-2003-0971
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers…
–
CVE-2003-0255
The key validation code in GnuPG before 1.2.2 does not properly determine the validity of keys with multiple user IDs and assigns the greatest validity of the most valid user ID,…