Bug 195946

Summary:	CVE-2006-3082 gnupg integer overflow
Product:	[Fedora] Fedora	Reporter:	Josh Bressers <bressers>
Component:	gnupg	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Mike McLean <mikem>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	5	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:	impact=moderate,source=vendorsec,public=20060531,reported=20060619
Fixed In Version:	1.4.4-2	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2006-07-06 21:06:50 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	196190

Description Josh Bressers 2006-06-19 20:12:27 UTC

gnupg integer overflow

Text taken from MITRE:

parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20 allows remote attackers
to cause a denial of service (gpg crash) and possibly overwrite memory
via a message packet with a large length, which could lead to an
integer overflow, as demonstrated using the --no-armor option.


This issue also affects FC4

Comment 2 Fedora Update System 2006-06-26 23:02:01 UTC

gnupg-1.4.4-2 has been pushed for fc5, which should resolve this issue.  If these problems are still present in this version, then please make note of it in this bug report.

Comment 3 Fedora Update System 2006-06-30 20:13:41 UTC

gnupg-1.4.4-2 has been pushed for fc5, which should resolve this issue.  If these problems are still present in this version, then please make note of it in this bug report.

Comment 4 Nalin Dahyabhai 2006-07-06 21:06:50 UTC

Updates were pushed, but this didn't get closed.  Weird.