Summary
Jean-René Reinhard, Olivier Levillain and Florian Maury discovered that
GnuPG incorrectly handled certain OpenPGP messages. If a user or automated
system were tricked into processing a specially-crafted message, GnuPG
could consume resources, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | gnupg | 1.4.16-1ubuntu2.1 |
| Ubuntu · 14.04 LTS 14.04:LTS | gnupg2 | 2.0.22-3ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent …
References
-
report
https://ubuntu.com/security/CVE-2014-4617