Maniphest T1823

parse-packet.c DoS using badly encoded MPIs.
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• werner
	Jan 28 2015, 8:32 PM

Tags

Subscribers

Description

GnuPG's packet parser allows for unlimted key packet sizes and allocates memory
for it. This can be used for DoS. Probably all versions.

Related Objects

Mentioned In: T1829: Excessive memory use on --import of crafted file
Mentioned Here: rG27d7addccf78: gpg: Limit the size of key packets to a sensible value.
rG2b2adb85948c: gpg: Limit the size of key packets to a sensible value.
rG382ba4b137b4: gpg: Limit the size of key packets to a sensible value.

Event Timeline

• werner added projects: In Progress, gnupg, Bug Report.Jan 28 2015, 8:32 PM

• werner added a subscriber: • werner.

Fixed for 2.1 with 382ba4b.Should be backported to 2.0 and 1.4.

Back ported to 2.0 (commit 2b2adb85948ce2c7db727ebc0c99e8ad2c29bf5f)

Back ported to 1.4 (commit 27d7addccf782d5cb0084cb17522d712d4a6d6b)

• werner mentioned this in T1829: Excessive memory use on --import of crafted file.Mar 30 2017, 7:16 PM