CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and…

published August 5, 2010

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05342 · 92.6th percentile
Published
2010-08-05T18:00Z
EPSS history
Timeline
  • 05 AUG 18:00Z
    Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and…
    cvelistv5