CVE-2013-4402

Опубликовано: 28 окт. 2013

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnupg:gnupg:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.8:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.10:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.11:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.12:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.13:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:1.4.14:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.12:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.13:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.14:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.15:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.16:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.17:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.18:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.19:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.20:*:*:*:*:*:*:*

cpe:2.3:a:gnupg:gnupg:2.0.21:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04675

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2013-4402

ubuntu

почти 12 лет назад

The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.

CVE-2013-4402

redhat

почти 12 лет назад

The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.

CVE-2013-4402

debian

почти 12 лет назад

The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x be ...

GHSA-fhrq-6wcr-78q4

github

больше 3 лет назад

The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.

ELSA-2013-1459

oracle-oval

почти 12 лет назад

ELSA-2013-1459: gnupg2 security update (MODERATE)

EPSS

Процентиль: 89%

0.04675

Низкий

5 Medium

CVSS2

Дефекты

CWE-20