Descriptionparse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of service (gpg crash) and possibly overwrite memory via a message packet with a large length (long user ID string), which could lead to an integer overflow, as demonstrated using the --no-armor option.
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SR:2006:015, published Fri, 30 Jun 2006 16:00:00 +0000
- SUSE-SR:2006:018, published Fri, 28 Jul 2006 16:00:00 +0000
SUSE Timeline for this CVECVE page created: Fri Jun 28 03:21:51 2013
CVE page last modified: Fri Oct 7 12:45:34 2022