CVE-2006-7239: Null Pointer Dereference
The gnutlsx509oid2macalgorithm function in lib/gnutlsalgorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-7239?
CVE-2006-7239 is classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2006-7239?
To fix CVE-2006-7239, upgrade to GnuTLS version 1.4.2 or later.
What causes CVE-2006-7239?
CVE-2006-7239 is caused by a null pointer dereference triggered by a crafted X.509 certificate using an unsupported hash algorithm.
Which versions of GnuTLS are affected by CVE-2006-7239?
CVE-2006-7239 affects GnuTLS versions prior to 1.4.2, including versions 1.0.17 to 1.4.1.
Is CVE-2006-7239 exploitable remotely?
Yes, CVE-2006-7239 can be exploited remotely by sending a specially crafted X.509 certificate.