CVE-2016-4021 The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by th...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by the \xa3\x03 string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pgpdump(Debian:12) | < 0.31-0.1 | 0.31-0.1 |
| debian/pgpdump(Debian:13) | < 0.31-0.1 | 0.31-0.1 |
| debian/pgpdump(Debian:14) | < 0.31-0.1 | 0.31-0.1 |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| pgpdump project pgpdump | <= 0.29 | No fix listed |
References
- Debian Security Tracker CVE-2016-4021 vendor-advisory
- FEDORA-2016-8f4b54b005 vendor-advisory
- FEDORA-2016-6fd7a31d36 vendor-advisory
- FEDORA-2016-5733ad20f5 vendor-advisory
- 20160418 CVE-2016-4021: pgpdump 0.29 - Endless loop parsing specially crafted input (SYSS-2016-030) exploit mailing-list
- github.com
- www.syss.de exploit
- bugs.debian.org issue-tracking