CVE-2014-4617

The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service…

published June 25, 2014

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03305 · 88.4th percentile
Published
2014-06-25T10:00Z
EPSS history
Timeline
  • 25 JUN 10:00Z
    The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service…
    cvelistv5