CVE-2010-2547

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.

• CWE-416

• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/044935.htmlMailing List, Third Party Advisory
• http://lists.gnupg.org/pipermail/gnupg-announce/2010q3/000302.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/38877Broken Link, Vendor Advisory
• http://secunia.com/advisories/40718Broken Link, Vendor Advisory
• http://secunia.com/advisories/40841Broken Link, Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462008Broken Link
• http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0076Broken Link
• http://www.debian.org/security/2010/dsa-2076Mailing List, Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:143Broken Link
• http://www.securityfocus.com/bid/41945Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024247Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/1931Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1950Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1988Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2217Broken Link
• http://www.vupen.com/english/advisories/2010/3125Broken Link
• https://issues.rpath.com/browse/RPL-3229Broken Link
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/044935.htmlMailing List, Third Party Advisory
• http://lists.gnupg.org/pipermail/gnupg-announce/2010q3/000302.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.htmlMailing List, Third Party Advisory
• http://secunia.com/advisories/38877Broken Link, Vendor Advisory
• http://secunia.com/advisories/40718Broken Link, Vendor Advisory
• http://secunia.com/advisories/40841Broken Link, Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.462008Broken Link
• http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0076Broken Link
• http://www.debian.org/security/2010/dsa-2076Mailing List, Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:143Broken Link
• http://www.securityfocus.com/bid/41945Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024247Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/1931Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1950Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/1988Broken Link, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/2217Broken Link
• http://www.vupen.com/english/advisories/2010/3125Broken Link
• https://issues.rpath.com/browse/RPL-3229Broken Link

Published

Aug 5, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2541Buffer overflow in ftmulti.c in the ftmulti demo program in …
• CVE-2010-2542Stack-based buffer overflow in the is_git_directory function…
• CVE-2010-2543Cross-site scripting (XSS) vulnerability in include/top_grap…
• CVE-2010-2544Cross-site scripting (XSS) vulnerability in utilities.php in…
• CVE-2010-2545Multiple cross-site scripting (XSS) vulnerabilities in Cacti…
• CVE-2010-2546Multiple heap-based buffer overflows in loaders/load_it.c in…
• CVE-2010-2548IcedTea6 before 1.7.4 does not properly check property acces…9.1
• CVE-2010-2549Use-after-free vulnerability in the kernel-mode drivers in M…
• CVE-2010-2550The SMB Server in Microsoft Windows XP SP2 and SP3, Windows …
• CVE-2010-2551The SMB Server in Microsoft Windows Vista SP1 and SP2, Windo…
• CVE-2010-2552Stack consumption vulnerability in the SMB Server in Microso…
• CVE-2010-2553The Cinepak codec in Microsoft Windows XP SP2 and SP3, Windo…