CVE-2006-7239

Published: May 24, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference.

Affected (42)

Products: Gnu: Gnutls

Gnu

1 product

Gnutls

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Gnu Gnutls	Up to 1.4.1
Gnu Gnutls	Version 1.0.16
Gnu Gnutls	Version 1.0.17
Gnu Gnutls	Version 1.0.18
Gnu Gnutls	Version 1.0.19
Gnu Gnutls	Version 1.0.20
Gnu Gnutls	Version 1.0.21
Gnu Gnutls	Version 1.0.22
Gnu Gnutls	Version 1.0.23
Gnu Gnutls	Version 1.0.24
Gnu Gnutls	Version 1.0.25
Gnu Gnutls	Version 1.1.13
Gnu Gnutls	Version 1.1.14
Gnu Gnutls	Version 1.1.15
Gnu Gnutls	Version 1.1.16
Gnu Gnutls	Version 1.1.17
Gnu Gnutls	Version 1.1.18
Gnu Gnutls	Version 1.1.19
Gnu Gnutls	Version 1.1.20
Gnu Gnutls	Version 1.1.21
Gnu Gnutls	Version 1.1.22
Gnu Gnutls	Version 1.1.23
Gnu Gnutls	Version 1.2.0
Gnu Gnutls	Version 1.2.10
Gnu Gnutls	Version 1.2.11
Gnu Gnutls	Version 1.2.1
Gnu Gnutls	Version 1.2.2
Gnu Gnutls	Version 1.2.3
Gnu Gnutls	Version 1.2.4
Gnu Gnutls	Version 1.2.5
Gnu Gnutls	Version 1.2.6
Gnu Gnutls	Version 1.2.7
Gnu Gnutls	Version 1.2.8.1a1
Gnu Gnutls	Version 1.2.8
Gnu Gnutls	Version 1.2.9
Gnu Gnutls	Version 1.3.0
Gnu Gnutls	Version 1.3.1
Gnu Gnutls	Version 1.3.2
Gnu Gnutls	Version 1.3.3
Gnu Gnutls	Version 1.3.4
Gnu Gnutls	Version 1.3.5
Gnu Gnutls	Version 1.4.0