CVE-2006-7239
Fixed in a distro release EPSS 2%
The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference.
Products: gnutls
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 5 | gnutls | 0:1.4.1-7.el5_8.1 |
| Red Hat Enterprise Linux 5 | gnutls-debuginfo | 0:1.4.1-7.el5_8.1 |
| Red Hat Enterprise Linux 5 | gnutls-devel | 0:1.4.1-7.el5_8.1 |
| Red Hat Enterprise Linux 5 | gnutls-utils | 0:1.4.1-7.el5_8.1 |