CVE-2006-3082
N/A
Published: June 19, 2006 at 06:00 PM UTC
Updated: June 16, 2026 at 10:26 PM UTC
1 product affected across 1 vendorGnuPG
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 7%
Description
parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (33)
Vendor Advisoryx_refsource_SGI
Source: [email protected]
ftp://patches.sgi.com/support/free/security/advisories/20060701-01-Ux_refsource_CONFIRM
Source: [email protected]
http://cvs.gnupg.org/cgi-bin/viewcvs.cgi/trunk/g10/parse-packet.c?rev=4157&r1=4141&r2=4157Mailing Listx_refsource_FULLDISC
Source: [email protected]
http://seclists.org/lists/fulldisclosure/2006/May/0774.htmlMailing Listx_refsource_FULLDISC
Source: [email protected]
http://seclists.org/lists/fulldisclosure/2006/May/0782.htmlMailing Listx_refsource_FULLDISC
Source: [email protected]
http://seclists.org/lists/fulldisclosure/2006/May/0789.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20783Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20801Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/20811Quick Info
StatusMODIFIED
CWE
CWE-189
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card