CVE-2006-3746
Fixed in a distro release EPSS 7%
Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.
Products: gnupg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gnupg2 | 1.9.20-2 |
| Debian 13 | gnupg2 | 1.9.20-2 |
| Debian 14 | gnupg2 | 1.9.20-2 |
| Debian 3.1 | gnupg | 1.4.1-1.sarge5 |
| Debian 3.1 | gnupg2 | 1.9.15-6sarge2 |
| Red Hat Enterprise Linux 3 | gnupg | 0:1.2.1-17 |
| Red Hat Enterprise Linux 3 | gnupg-debuginfo | 0:1.2.1-17 |
| Red Hat Enterprise Linux 4 | gnupg | 0:1.2.6-6 |
| Red Hat Enterprise Linux 4 | gnupg-debuginfo | 0:1.2.6-6 |
| openSUSE Tumbleweed | gpg2 | 2.2.27-2.4 |