oss-sec mailing list archives

Re: DO NOT OPEN PREVIOUS MAIL Re: [oss-security] Denial of service in GnuPG


From: Jakub Wilk <jwilk () jwilk net>
Date: Mon, 4 Jul 2022 17:00:29 +0200

As a data point, if Mutt has pgp_auto_decode=yes ("automatically attempt to decrypt traditional PGP messages") in the config, it will trigger the DoS when you view the message.

(And it seems that if you lose patience waiting for the message to show up and press ctrl+backslash in attempt to make it quit, it will actually hang forever.)

--
Jakub Wilk


Current thread: