Mutt Denial-of-Service Vulnerability Due to Infinite Loop in GPGME Data Handling

A denial-of-service vulnerability has been identified in Mutt versions prior to 2.3.2. The issue arises from an infinite loop in the function 'data_object_to_stream' within 'crypt-gpgme.c'. This loop occurs because the code does not properly handle a specific return value, leading to excessive processing and potentially causing the application to hang.

Impact

Exploitation of this vulnerability leads to an infinite loop, causing the application to become unresponsive.

Remediation

Users can upgrade to Mutt version 2.3.2 or later to address this vulnerability.