VulnerabilityModified
CVE-2006-5111
The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature.
MEDIUM 5.0EPSS 1.90%
Does this matter?
Lower severity and a low EPSS score (1.90%). Track it; it rarely justifies an emergency change on its own.
Description
The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.90% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- libksba library/libksba library
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22423
- http://secunia.com/advisories/22445
- http://secunia.com/advisories/22473
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:183
- http://www.novell.com/linux/download/updates/101_x86_64.htmlPatch
- http://www.novell.com/linux/security/advisories/2006_23_sr.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/20565
- http://www.ubuntu.com/usn/usn-365-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29621
- http://secunia.com/advisories/22423
- http://secunia.com/advisories/22445
- http://secunia.com/advisories/22473
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:183
- http://www.novell.com/linux/download/updates/101_x86_64.htmlPatch
- http://www.novell.com/linux/security/advisories/2006_23_sr.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/20565
- http://www.ubuntu.com/usn/usn-365-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29621
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.