CVE-2024-53857
rPGP Potential Resource Exhaustion when handling Untrusted Messages
Summary
rPGP Potential Resource Exhaustion when handling Untrusted Messages
Original description
The description as published by the source.
rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows attackers to trigger resource exhaustion vulnerabilities in rpgp by providing crafted messages. This affects general message parsing and decryption with symmetric keys.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-53857 rust-pgp Fixed in: 0.14.2-1
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov