CVE:CVE-2014-4617
CNNVD:CNNVD-201406-602
GnuPG（GNU Privacy Guard）是GNU计划开发的一套开源的加密软件，采用GNU通用公共许可证。该软件支持公钥、对称加密、散列等算法。
GnuPG 1.4.16及之前的版本和2.0至2.0.23版本的g10/compress.c文件中的‘do_uncompress’函数存在安全漏洞。攻击者可借助畸形的压缩数据包利用该漏洞造成拒绝服务（无限循环）。
solution:Upgrade gnupg gnupg to a higher version than 2.0,2.0.1,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.0.18,2.0.19,2.0.20,2.0.21,2.0.22,2.0.23,1.4.16,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.6,1.3.90,1.3.91,1.3.92,1.3.93,1.4.0,1.4.2,1.4.3,1.4.4,1.4.5,1.4.8,1.4.10,1.4.11,1.4.12,1.4.13,1.4.14,1.4.15,and avoid the version 2.0,2.0.1,2.0.3,2.0.4,2.0.5,2.0.6,2.0.7,2.0.8,2.0.10,2.0.11,2.0.12,2.0.13,2.0.14,2.0.15,2.0.16,2.0.17,2.0.18,2.0.19,2.0.20,2.0.21,2.0.22,2.0.23,(,1.4.16],1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.3.0,1.3.1,1.3.2,1.3.3,1.3.4,1.3.6,1.3.90,1.3.91,1.3.92,1.3.93,1.4.0,1.4.2,1.4.3,1.4.4,1.4.5,1.4.8,1.4.10,1.4.11,1.4.12,1.4.13,1.4.14,1.4.15; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1