CVE-2006-7239
The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gnu:gnutls
References
- http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001190.html
- http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001192.html
- http://www.gnu.org/software/gnutls/security.html
- http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001190.html
- http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001192.html