CVE-2006-7239

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-05-24 · updated 2026-06-16
Weakness: CWE-310

Description

The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference.

Affected products

[UNKNOWN] gnutls: through 1.4.1; 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21 (+35)

References

http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001190.html
http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001192.html
http://www.gnu.org/software/gnutls/security.html
http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001190.html
http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001192.html
http://www.gnu.org/software/gnutls/security.html

Get alerted when CVE-2006-7239 or the next vulnerability affects your stack