Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2009-1415

Published: 30/04/2009 Updated: 09/02/2024
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Gnu

Vulnerability Summary

lib/pk-libgcrypt.c in libgnutls in GnuTLS prior to 2.6.6 does not properly handle invalid DSA signatures, which allows remote malicious users to cause a denial of service (application crash) and possibly have unspecified other impact via a malformed DSA key that triggers a (1) free of an uninitialized pointer or (2) double free.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu gnutls

Exploits

Exploit DB: GnuTLS 2.6.x - libgnutls lib/pk-libgcrypt.c Malformed DSA Key Handling Remote Denial of Service
source: wwwsecurityfocuscom/bid/34783/info GnuTLS is prone to multiple remote vulnerabilities: - A remote code-execution vulnerability - A denial-of-service vulnerability - A signature-generation vulnerability - A signature-verification vulnerability An attacker can exploit these issues to potentially execute arbitrary code, trigger den ...

References

CWE-824http://thread.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3488http://permalink.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3502http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3515http://secunia.com/advisories/34842http://www.securitytracker.com/id?1022157http://www.vupen.com/english/advisories/2009/1218http://www.securityfocus.com/bid/34783http://www.mandriva.com/security/advisories?name=MDVSA-2009:116http://security.gentoo.org/glsa/glsa-200905-04.xmlhttp://secunia.com/advisories/35211https://exchange.xforce.ibmcloud.com/vulnerabilities/50445https://exchange.xforce.ibmcloud.com/vulnerabilities/50260https://exchange.xforce.ibmcloud.com/vulnerabilities/50257https://nvd.nist.govhttps://www.exploit-db.com/exploits/32964/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook