DEBIAN-CVE-2006-6235

DEBIAN-CVE-2006-6235 PUBLISHED CVSS 9.300000190734863 CRITICAL

A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory.

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:11	gnupg2	0, 0, 0
Debian:12	gnupg2	0, 0, 0
Debian:13	gnupg2	0, 0, 0
Debian:14	gnupg2	0, 0, 0

Timeline

Dec 7, 2006 CVE Published
Aug 4, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2006-6235 advisory

Open in Interactive Console →