CVE-2014-4617

Name	CVE-2014-4617
Description	The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-0012-1, DLA-51-1, DSA-2967-1, DSA-2968-1
Debian Bugs	752497, 752498

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
gnupg2 (PTS)	buster, buster (security)	2.2.12-1+deb10u2	fixed
	bullseye (security), bullseye	2.2.27-2+deb11u2	fixed
	bookworm, trixie	2.2.40-1.1	fixed
	sid	2.2.40-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
gnupg	source	squeeze	1.4.10-4+squeeze5
gnupg	source	wheezy	1.4.12-7+deb7u4	DSA-2967-1
gnupg	source	(unstable)	1.4.16-1.2		752497
gnupg2	source	squeeze	2.0.14-2+squeeze2	DLA-51-1
gnupg2	source	wheezy	2.0.19-2+deb7u2	DSA-2968-1
gnupg2	source	(unstable)	2.0.24-1		752498

http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=11fdfcf82bd8