CVE-2006-7239
The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2010-05-24
- Last modified
- 2024-08-07
- Weaknesses
- CWE-310
Affected products
References
- http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001190.html
- http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001192.html
- http://www.gnu.org/software/gnutls/security.html
