GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4402
Unknown