Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2010-2547 Details

Description

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.1 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/044935.html	CVE	Mailing ListThird Party Advisory
http://lists.gnupg.org/pipermail/gnupg-announce/2010q3/000302.html	CVE	PatchVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html	CVE	Mailing ListThird Party Advisory
http://secunia.com/advisories/38877	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/40718	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/40841	CVE	Broken LinkVendor Advisory
https://issues.rpath.com/browse/RPL-3229	CVE	Broken Link
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462008	CVE	Broken Link
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0076	CVE	Broken Link
http://www.debian.org/security/2010/dsa-2076	CVE	Mailing ListThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:143	CVE	Broken Link
http://www.securityfocus.com/bid/41945	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1024247	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2010/1931	CVE	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2010/1950	CVE	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2010/1988	CVE	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2010/2217	CVE	Broken Link
http://www.vupen.com/english/advisories/2010/3125	CVE	Broken Link
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/044935.html	[email protected]	Mailing ListThird Party Advisory
http://lists.gnupg.org/pipermail/gnupg-announce/2010q3/000302.html	[email protected]	PatchVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html	[email protected]	Mailing ListThird Party Advisory
http://secunia.com/advisories/38877	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/40718	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/40841	[email protected]	Broken LinkVendor Advisory
https://issues.rpath.com/browse/RPL-3229	[email protected]	Broken Link
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462008	[email protected]	Broken Link
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0076	[email protected]	Broken Link
http://www.debian.org/security/2010/dsa-2076	[email protected]	Mailing ListThird Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:143	[email protected]	Broken Link
http://www.securityfocus.com/bid/41945	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1024247	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2010/1931	[email protected]	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2010/1950	[email protected]	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2010/1988	[email protected]	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2010/2217	[email protected]	Broken Link
http://www.vupen.com/english/advisories/2010/3125	[email protected]	Broken Link

see all 36 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-416	Use After Free	[email protected]

Affected Products

Product	Versions
gnupg gnupg	>= 2.0.0, <= 2.0.16
CPE cpe:2.3:a:gnupg:gnupg:::::::: Remediation No remediation found in references.
fedoraproject fedora	13
CPE cpe:2.3:o:fedoraproject:fedora:13:::::::* Remediation No remediation found in references.
debian debian linux	5.0
CPE cpe:2.3:o:debian:debian_linux:5.0:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 29, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 2, 2024	Modified Analysis	[email protected]
Feb 13, 2023	CVE Modified	[email protected]
Feb 2, 2023	CVE Modified	[email protected]
Aug 6, 2010	Initial Analysis	[email protected]

CVE-2010-2547 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO