CVE-2014-4617 in GnuPGinfo

Summary

The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

06/24/2014

Disclosure

06/25/2014

Entries

1

CPE

ready

CWE

CWE-20

CVSS

5.3

EPSS

0.08032

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-4617
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-4617
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-4617/

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!