Denial of Service Vulnerability in GnuPG's Compressed Packet Parser

CVE-2013-4402 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.

Learn more about our Web Application Penetration Testing UK.