Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-4617
5
MEDIUMCVSS v2
Published
June 25, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.
gpg/gnupg
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).
GitHubThe GNU Privacy Guard. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).= 2.0.1, = 2.0.7, = 2.0.15, = 2.0.8, = 2.0.11, = 2.0.6, = 2.0.10, = 2.0.13, = 2.0, = 2.0.12, = 2.0.19, = 2.0.20, = 2.0.17, = 2.0.18, = 2.0.23, = 2.0.22, = 2.0.16, = 2.0.4, = 2.0.5, = 2.0.14, = 2.0.21, = 2.0.3, = 1.4.8, = 1.2.3, = 1.3.3, = 1.0.1, = 1.4.15, = 1.3.1, = 1.2.6, = 1.4.14, = 1.3.93, = 1.0.7, = 1.2.0, = 1.3.91, = 1.3.92, <= 1.4.16, = 1.0.4, = 1.0.6, = 1.2.5, = 1.0.2, = 1.3.4, = 1.4.10, = 1.4.4, = 1.0.0, = 1.2.2, = 1.3.2, = 1.4.0, = 1.4.12, = 1.4.13, = 1.2.7, = 1.3.0, = 1.0.5, = 1.0.3, = 1.2.4, = 1.4.11, = 1.4.5, = 1.2.1, = 1.4.2, = 1.4.3, = 1.3.6, = 1.3.90NVD