| Package | Affected versions | Patched versions |
|---|---|---|
| gnupg | = 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.2.7= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.6= 1.3.90= 1.3.91= 1.3.92= 1.3.93= 1.4.0= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.14= 1.4.15= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.8= 2.0= 2.0.1= 2.0.10= 2.0.11= 2.0.12= 2.0.13= 2.0.14= 2.0.15= 2.0.16= 2.0.17= 2.0.18= 2.0.19= 2.0.20= 2.0.21= 2.0.22= 2.0.23= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8≤ 1.4.16 |
The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free