Unscored severity · published Oct 28, 2013
CVE-2013-4402
The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP…
–
CVSS
5%
EPSS
No
On KEV
Description
The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.0% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnupg · Gnupg
1.4.0; 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.8; +19 more · source: NVD
UL
Ubuntu Linux · Canonical
10.04; 12.04; 12.10; 13.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4402
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4402
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725433
Vendor Advisory
http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000333.html
Vendor Advisory
http://lists.gnupg.org/pipermail/gnupg-announce/2013q4/000334.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-10/msg00020.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2013-10/msg00025.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2013-1459.html
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation