CVE-2011-2207: Medium severity gnupg 2 (gnu privacy guard) vulnerability
Published Nov 27, 2019
·Updated
dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate.
Affected Software
4 affected components
debian/dirmngr
gnupg GnuPG<2.1.0
redhat Enterprise Linux=6.0
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Nov 27, 2019
CVE Published
via MITRE·06:06 PM
Data Sourced
via MITRE·06:06 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2011-2207?
CVE-2011-2207 is a vulnerability in dirmngr before version 2.1.0 that improperly handles certain system calls, allowing remote attackers to cause a denial of service (DOS) via a specially-crafted certificate.
2
What is the severity of CVE-2011-2207?
The severity of CVE-2011-2207 is medium with a CVSS score of 5.3.
3
Which software versions are affected by CVE-2011-2207?
Versions before 2.1.0 of Gnupg Gnupg, Redhat Enterprise Linux 6.0, and Debian Debian Linux 8.0 are affected by CVE-2011-2207.
4
How can remote attackers exploit CVE-2011-2207?
Remote attackers can exploit CVE-2011-2207 by sending a specially-crafted certificate to the vulnerable dirmngr program.
5
Are there any fixes available for CVE-2011-2207?
There are no known fixes available for CVE-2011-2207 at the moment.