pgpdump: denial of service
| Package(s): | pgpdump | CVE #(s): | CVE-2016-4021 | ||||||||||||||||||||||||
| Created: | April 25, 2016 | Updated: | January 2, 2017 | ||||||||||||||||||||||||
| Description: | From the Arch Linux advisory:
When pgpdump is run on specially crafted input, a denial of service condition occurs. The program runs with 100% CPU usage for an indefinite amount of time. This can be abused in scenarios where users can supply input to pgpdump, e.g. in http://www.pgpdump.net/. A remote attacker is able to create a specially crafted input that is leading to CPU resource consumption resulting in denial of service. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||