CVE-2015-1607

MEDIUM Year: 2015
CVSS v3 Score
5.5
Medium
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-20
View all →

Vulnerability Description

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service (invalid read operation) via a crafted keyring file, related to sign extensions and "memcpy with overlapping ranges."

Related Vulnerabilities

CVE-2008-7316

MEDIUM
CVSS:5.5(Medium)

mm/filemap.c in the Linux kernel before 2.6.25 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers an iovec of zero length, followed by a page fault ...

CWE-202008

CVE-2010-3049

MEDIUM
CVSS:5.5(Medium)

Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot).

CWE-202010

CVE-2010-3293

MEDIUM
CVSS:5.5(Medium)

mailscanner can allow local users to prevent virus signatures from being updated

CWE-202010

CVE-2010-5328

MEDIUM
CVSS:5.5(Medium)

include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of se...

CWE-202010

CVE-2011-0220

MEDIUM
CVSS:5.5(Medium)

Apple Bonjour before 2011 allows a crash via a crafted multicast DNS packet.

CWE-202011