CVE-2006-3746: gnupg

CVSS: 5.0v2.0MediumModified

AliasesRHSA-2006:0615DEBIAN-CVE-2006-3746DSA-1140-1+1 more

Published 28-07-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-3746 is a medium (CVSS 5.0) vulnerability in gnupg. EPSS estimates a 7.21% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

7.21%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits4reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10815-1

Timeline

28-07-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentation fault) via a crafted message.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

7.21%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.21% on 20-09-2026

20-09-202620-10-2026

EPSS score

7.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.redhat.com)
Maturity: unknown
referenceUnverified
Exploit Reference (lists.immunitysec.com)
Maturity: unknown

Show all 4 exploits

exploit-databasedoslinuxVerified
GnuPG 1.4/1.9 - Parse_Comment Remote Buffer Overflow
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Debian2 products

gnupg< 1.4.1-1.sarge5
gnupg2< 1.9.20-2 | < 1.9.15-6sarge2

Redhat2 products

gnupg< 0:1.2.1-17 | < 0:1.2.6-6
gnupg-debuginfo< 0:1.2.1-17 | < 0:1.2.6-6

Gnupg1 product

gnupg1.4.4

3 vendors · 5 products

References

43 links

secunia.com/advisories/21329Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2006-0615.htmlVendor AdvisoryX Refsource REDHAT
bugs.debian.org/cgi-bin/bugreport.cgi/gnupg.CVE-2006-3746.diff?bug=381204%3Bmsg=15%3Batt=1X Refsource MISC
secunia.com/advisories/21297Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3123VDB EntryX Refsource VUPEN
www.novell.com/linux/security/advisories/2006_20_sr.htmlVendor AdvisoryX Refsource SUSE
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11347VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/21300Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21326Third Party AdvisoryX Refsource SECUNIA
issues.rpath.com/browse/RPL-560X Refsource MISC

Show all 43 references

secunia.com/advisories/21598Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/28220VDB EntryX Refsource XF
secunia.com/advisories/21467Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2006/dsa-1140Vendor AdvisoryX Refsource DEBIAN
www.securityfocus.com/bid/19110VDB EntryX Refsource BIDExploit
secunia.com/advisories/21351Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21522Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21333Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2006-164.htmX Refsource CONFIRM
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=200502X Refsource MISCExploit
www.gossamer-threads.com/lists/gnupg/devel/37623Mailing ListX Refsource MLIST
www.mandriva.com/security/advisories?name=MDKSA-2006:141Vendor AdvisoryX Refsource MANDRIVA
lists.immunitysec.com/pipermail/dailydave/2006-July/003354.htmlMailing ListX Refsource MLISTExploit
www.ubuntu.com/usn/usn-332-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/21378Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1016622VDB EntryX Refsource SECTRACK
www.osvdb.org/27664VDB EntryX Refsource OSVDB
secunia.com/advisories/21346Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/442621/100/100/threadedMailing ListX Refsource BUGTRAQ
security.gentoo.org/glsa/glsa-200608-08.xmlVendor AdvisoryX Refsource GENTOO
www.debian.org/security/2006/dsa-1141Vendor AdvisoryX Refsource DEBIAN
www.securityfocus.com/archive/1/442012/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/21306Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21524Third Party AdvisoryX Refsource SECUNIA
lwn.net/Alerts/194228/Vendor AdvisoryX Refsource TRUSTIX
access.redhat.com/errata/RHSA-2006:0615Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=200502REPORT
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0615.jsonAdvisory
access.redhat.com/security/cve/CVE-2006-3746REPORT
www.cve.org/CVERecord?id=CVE-2006-3746Advisory
nvd.nist.gov/vuln/detail/CVE-2006-3746Advisory
security-tracker.debian.org/tracker/CVE-2006-3746Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities