CVE-2013-4576
Published Dec 20, 2013
Last updated 7 years ago
Overview
- Description
- GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 2.1
- Impact score
- 2.9
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-255
Social media
- Hype score
- Not currently trending
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A287B57-D002-4A42-96F1-E1F701F9762C", "versionEndIncluding": "1.4.15" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6863306-F7B8-47D9-8FF9-4340FC6D718F" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA95D254-1D85-4523-9DF2-8A07BF05573E" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E24FB9C-1CA9-4A1B-8AF6-06B3C1865EF0" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D07D0653-4538-47D8-AB8F-0A23D65F0AE0" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "95E18355-65AF-4DB4-B6B2-431D7788FF23" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.4:-:win32:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E61804F-21BA-4850-B859-D69C80F37FFC" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88C40692-FE9F-48D6-9AEB-5F35FA369980" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.5:-:win32:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "585F51C8-2FDC-46CE-9F71-ED9EE2ADA472" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18395DAB-24DA-4ABD-ABD8-38A49417B052" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6228E3FF-5EB4-4F46-9EA8-1B114947994D" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96DEF388-2B09-4212-8AF5-9FE54CCAFEC8" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A798490-741B-4EB4-B1D9-353A181A7AA2" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.1:windows:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F781A379-57DF-4D1E-8B85-4FD637E4B967" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8466E9BD-5623-40EE-A604-0F29C3520B63" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E98B61C-7093-4251-B1D8-59B647C2DF6B" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F9FCAC0-08D1-4044-A506-4AC14BF381CA" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "545E4C50-229D-4B27-9DB2-9D1204451A9E" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D50A16A8-9C96-47CB-B18B-AE79C754ABBC" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08877372-B7DD-4543-84A8-C40D2BA100F1" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7135BE6C-E797-4C41-BCD5-161DC7561433" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E909F1D4-AFB1-43F3-9635-E318D64099B4" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB4AAE4C-3F59-46D3-A38E-CC5DFCBEC3DF" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "688CDCA9-2809-4C0E-9DBC-133F48D56BEA" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "564B521B-3C7C-46CF-94E8-A368AF81DA54" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC04BFA0-C7B0-4F70-9676-8156C9CE18AE" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.90:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F43CE80-06BC-4448-9033-F2F88663C527" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.91:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7181202-BC32-4F1E-9EF8-F544CCDA1671" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.92:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F55827F8-CC36-45DA-8F9E-1F520911EB12" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.3.93:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCEAA5DF-33D1-4D4A-BA01-4BC863DBC272" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "365FF476-1FFD-4E09-900C-50E0660766AB" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28374619-966D-4F38-B83E-A6296F27CC05" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22A28CDF-F2AF-4D49-9FB1-AED34A758289" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6399A22D-90DF-4CB5-9367-0C5242BD1A2B" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D63B0B4A-3998-4A4F-AD7A-BB8CEBE897B9" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDA6934A-3D02-4749-A147-BE538C0AF27F" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B238CA5-3B4D-4D6A-92CA-39A7CD57AF40" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DC6150E3-1D7C-44DA-BA57-35AB26F881B1" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EB20A34-5E11-4D70-B3DE-66DD9863AE0D" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA47467D-3D96-46DB-B0AC-D28586829710" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "68B68F2F-0718-4C87-9629-4657DC49EECC" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69D492F9-2064-488A-BD16-99DD865D2BF6" }, { "criteria": "cpe:2.3:a:gnupg:gnupg:1.4.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4929286-63C2-45D0-B0C7-E14438D82883" } ], "operator": "OR" } ] } ]