The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing     subkeys (CVE-2018-9234)

  - Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal     decryption, which allows physically proximate attackers to obtain the server's private key by determining     factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
    (CVE-2014-3591)

  - The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows     context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets,     as demonstrated by an a3 01 5b ff byte sequence. (CVE-2014-4617)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing     subkeys (CVE-2018-9234)

  - Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal     decryption, which allows physically proximate attackers to obtain the server's private key by determining     factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
    (CVE-2014-3591)

  - The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows     context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets,     as demonstrated by an a3 01 5b ff byte sequence. (CVE-2014-4617)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing     subkeys (CVE-2018-9234)

  - Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal     decryption, which allows physically proximate attackers to obtain the server's private key by determining     factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.
    (CVE-2014-3591)

  - The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows     context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets,     as demonstrated by an a3 01 5b ff byte sequence. (CVE-2014-4617)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The do_uncompress function in g10/compress.c in GnuPG     1.x before 1.4.17 and 2.x before 2.0.24 allows     context-dependent attackers to cause a denial of     service (infinite loop) via malformed compressed     packets, as demonstrated by an a3 01 5b ff byte     sequence.(CVE-2014-4617)

  - kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x     before 2.0.27, and 2.1.x before 2.1.2 does not properly     handle bitwise left-shifts, which allows remote     attackers to cause a denial of service (invalid read     operation) via a crafted keyring file, related to sign     extensions and 'memcpy with overlapping     ranges.'(CVE-2015-1607)

  - The keyring DB in GnuPG before 2.1.2 does not properly     handle invalid packets, which allows remote attackers     to cause a denial of service (invalid read and     use-after-free) via a crafted keyring     file.(CVE-2015-1606)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the gnupg2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The do_uncompress function in g10/compress.c in GnuPG     1.x before 1.4.17 and 2.x before 2.0.24 allows     context-dependent attackers to cause a denial of     service (infinite loop) via malformed compressed     packets, as demonstrated by an a3 01 5b ff byte     sequence.(CVE-2014-4617)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - GnuPG 2.2.4 and 2.2.5 does not enforce a configuration     in which key certification requires an offline master     Certify key, which results in apparently valid     certifications that occurred only with access to a     signing subkey.(CVE-2018-9234)

  - The do_uncompress function in g10/compress.c in GnuPG     1.x before 1.4.17 and 2.x before 2.0.24 allows     context-dependent attackers to cause a denial of     service (infinite loop) via malformed compressed     packets, as demonstrated by an a3 01 5b ff byte     sequence.(CVE-2014-4617)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The do_uncompress function in g10/compress.c allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.(CVE-2014-4617)

The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.
(CVE-2014-4617)

Impact

ARX

This vulnerability is exposed when using the Auto Diagnostics feature.

BIG-IP

GNU Privacy Guard (GnuPG) is not used in traffic processing. GnuPG is used only in administrative functions on the BIG-IP system, such as encryption of user configuration set (UCS) and single configuration files (SCF), and verification of ISOs and ASM signatures, which are not affected by this vulnerability. An authenticated ( root ) user with advanced shell access could upload a speciallycrafted file and execute gpg manually to trigger this vulnerability.

F5 iWorkflow, BIG-IQ, and Enterprise Manager

An authenticated user with advanced shell access could be able to exploit this vulnerability by executing gpg manually.

Updated gnupg, gnupg2 and libgcrypt packages fix security vulnerabilities :

GnuPG versions before 1.4.17 and 2.0.24 are vulnerable to a denial of service which can be caused by garbled compressed data packets which may put gpg into an infinite loop (CVE-2014-4617).

The libgcrypt library before version 1.5.4 is vulnerable to an ELGAMAL side-channel attack (CVE-2014-5270).

GnuPG before 1.4.19 is vulnerable to a side-channel attack which can potentially lead to an information leak (CVE-2014-3591).

GnuPG before 1.4.19 is vulnerable to a side-channel attack on data-dependent timing variations in modular exponentiation, which can potentially lead to an information leak (CVE-2015-0837).

The gnupg and gnupg2 package has been patched to correct these issues.

GnuPG2 is vulnerable to these issues through the libgcrypt library.
The issues were fixed in libgcrypt 1.6.3. The libgcrypt package in Mandriva, at version 1.5.4, was only vulnerable to the CVE-2014-3591 issue. It has also been patched to correct this issue.

Jean-Rene Reinhard, Olivier Levillain and Florian Maury reported that GnuPG, the GNU Privacy Guard, did not properly parse certain garbled compressed data packets. A remote attacker could use this flaw to mount a denial of service against GnuPG by triggering an infinite loop.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201407-04 (GnuPG: Denial of Service)

    GnuPG does not properly handle a specially crated compressed packet       resulting in an infinite loop.
  Impact :

    A context-dependent attacker can cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

GPG2 has been updated to fix a possible denial of service.

This security issue has been fixed :

  - Denial of service through infinite loop with garbled     compressed data packets (CVE-2014-4617)

Updated gnupg and gnupg2 packages fix security vulnerability :

GnuPG versions before 1.4.17 and 2.0.24 are vulnerable to a denial of service which can be caused by garbled compressed data packets which may put gpg into an infinite loop (CVE-2014-4617).

gpg2 was patched to fix a possible DoS.

This security issue was fixed :

  - Denial of service through infinite loop with garbled     compressed data packets (CVE-2014-4617)

Minor security update from upstream.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jean-Rene Reinhard, Olivier Levillain and Florian Maury reported that GnuPG, the GNU Privacy Guard, did not properly parse certain garbled compressed data packets. A remote attacker could use this flaw to mount a denial of service against GnuPG by triggering an infinite loop.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2258-1 advisory.

    Jean-Ren Reinhard, Olivier Levillain and Florian Maury discovered that GnuPG incorrectly handled certain     OpenPGP messages. If a user or automated system were tricked into processing a specially-crafted message,     GnuPG could consume resources, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

New gnupg2 packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue.

New gnupg packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue.

ID	Name	Product	Family	Severity
198980	RHEL 7 : gnupg (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198886	RHEL 5 : gnupg (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
198874	RHEL 6 : gnupg (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
135651	EulerOS Virtualization 3.0.2.2 : gnupg2 (EulerOS-SA-2020-1489)	Nessus	Huawei Local Security Checks	medium
134521	EulerOS Virtualization for ARM 64 3.0.2.0 : gnupg2 (EulerOS-SA-2020-1232)	Nessus	Huawei Local Security Checks	medium
132124	EulerOS 2.0 SP3 : gnupg2 (EulerOS-SA-2019-2589)	Nessus	Huawei Local Security Checks	high
131885	EulerOS 2.0 SP2 : gnupg2 (EulerOS-SA-2019-2393)	Nessus	Huawei Local Security Checks	high
124593	Amazon Linux 2 : gnupg2 (ALAS-2019-1203)	Nessus	Amazon Linux Local Security Checks	medium
100179	F5 Networks BIG-IP : GnuPG vulnerability (K21284031)	Nessus	F5 Networks Local Security Checks	medium
82407	Mandriva Linux Security Advisory : gnupg (MDVSA-2015:154)	Nessus	Mandriva Local Security Checks	medium
82198	Debian DLA-51-1 : gnupg2 security update	Nessus	Debian Local Security Checks	medium
78322	Amazon Linux AMI : gnupg2 (ALAS-2014-379)	Nessus	Amazon Linux Local Security Checks	medium
78321	Amazon Linux AMI : gnupg (ALAS-2014-378)	Nessus	Amazon Linux Local Security Checks	medium
76545	GLSA-201407-04 : GnuPG: Denial of Service	Nessus	Gentoo Local Security Checks	medium
76501	SuSE 11.3 Security Update : GPG2 (SAT Patch Number 9433)	Nessus	SuSE Local Security Checks	medium
76435	Mandriva Linux Security Advisory : gnupg (MDVSA-2014:127)	Nessus	Mandriva Local Security Checks	medium
76366	openSUSE Security Update : gpg2 (openSUSE-SU-2014:0866-1)	Nessus	SuSE Local Security Checks	medium
76335	Fedora 19 : gnupg2-2.0.24-1.fc19 (2014-7797)	Nessus	Fedora Local Security Checks	medium
76300	Fedora 20 : gnupg2-2.0.24-1.fc20 (2014-7796)	Nessus	Fedora Local Security Checks	medium
76285	Debian DSA-2968-1 : gnupg2 - security update	Nessus	Debian Local Security Checks	medium
76276	Ubuntu 14.04 LTS : GnuPG vulnerability (USN-2258-1)	Nessus	Ubuntu Local Security Checks	high
76219	Debian DSA-2967-1 : gnupg - security update	Nessus	Debian Local Security Checks	medium
76206	Slackware 13.37 / 14.0 / 14.1 / current : gnupg2 (SSA:2014-175-03)	Nessus	Slackware Local Security Checks	medium
76205	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : gnupg (SSA:2014-175-02)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2014-4617

high

Tenable Plugins

high

high

high

medium

medium

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

medium

medium

medium