pgpdump: denial of service

When pgpdump is run on specially crafted input, a denial of service condition occurs. The program runs with 100% CPU usage for an indefinite amount of time. This can be abused in scenarios where users can supply input to pgpdump, e.g. in http://www.pgpdump.net/...

pgpdump 0.29 Endless Loop

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-030 Product: pgpdump Maintainer: Kazu Yamamoto Affected Versions: 0.29 Tested Versions: 0.29 Vulnerability Type: Improper Input Validation CWE-20 Risk Level: Low Solution Status: Fixed in 0.30 Maintainer Notification: 2016-04-...