CVE-2016-4021 (fedora, pgpdump)
The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by the xa3x03 string.
Source: CVE-2016-4021 (fedora, pgpdump)