Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 58

Export CSV
CVE-2025-30258

gnupg: verification DoS due to a malicious subkey in the keyring

In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Gnupg
Products
Gnupg
CVE-2021-40528

libgcrypt: ElGamal implementation allows plaintext recovery

The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.

CVSS 3.1 · 5.9 Medium EPSS 1.4% KEV · Not listed
Vendors
Gnupg Redhat
Products
Libgcrypt Enterprise Linux
CVE-2017-0379

libgcrypt: Missing input validation for X25519 curve

Libgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it easier for attackers to discover a secret key, related to cipher/ecc.c and mpi/ec.c.

CVSS 3.0 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Gnupg
Products
Debian Linux Libgcrypt
CVE-2017-9526

libgcrypt: Possible timing attack on EdDSA session key

In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signing process) can easily recover the long-term secret key. 1.7.7 makes a cipher/ecc-eddsa.c change to store this session key in secure memory, to ensure that constant-time point operations are used in the MPI library.

CVSS 3.0 · 5.9 Medium EPSS 2.3% KEV · Not listed
Vendors
Gnupg
Products
Libgcrypt
CVE-2016-4574

libksba: Incomplete fix for CVE-2016-4356

Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-4356.

CVSS 3.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Canonical Gnupg Opensuse
Products
Ubuntu Linux Libksba Leap and 1 more
CVE-2016-4579

libksba: Out-of-bounds read in _ksba_ber_parse_tl

Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl."

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Gnupg Opensuse
Products
Ubuntu Linux Libksba Leap
CVE-2016-6313

libgcrypt: PRNG output is predictable

The mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6, and 1.7.x before 1.7.3 and GnuPG before 1.4.21 make it easier for attackers to obtain the values of 160 bits by leveraging knowledge of the previous 4640 bits.

CVSS 3.0 · 5.3 Medium EPSS 3.6% KEV · Not listed
Vendors
Canonical Debian Gnupg and 1 more
Products
Ubuntu Linux Debian Linux Gnupg and 2 more
CVE-2014-9087

libksba: integer underflow flaw leading to a heap-based buffer overflow in ksba_oid_to_str()

Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Gnupg and 1 more
Products
Ubuntu Linux Debian Linux Gnupg and 2 more
CVE-2015-7511

libgcrypt: side-channel attack on ECDH with Weierstrass curves

Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it easier for physically proximate attackers to extract ECDH keys by measuring electromagnetic emanations.

CVSS 3.0 · 2.0 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Gnupg
Products
Ubuntu Linux Debian Linux Libgcrypt
CVE-2016-4353

libksba: denial of service due to stack overflow in src/ber-decoder.c (push_decoder_state, pop_decoder_state)

ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which allows remote attackers to cause a denial of service (abort) via crafted BER data.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba
CVE-2014-4617

gnupg: infinite loop when decompressing data packets

The do_uncompress function in g10/compress.c in GnuPG 1.x before 1.4.17 and 2.x before 2.0.24 allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets, as demonstrated by an a3 01 5b ff byte sequence.

CVSS 2.0 · 5.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Debian Gnupg Opensuse
Products
Debian Linux Gnupg Opensuse
CVE-2014-5270

libgcrypt: ELGAMAL side-channel attack

Libgcrypt before 1.5.4, as used in GnuPG and other products, does not properly perform ciphertext normalization and ciphertext randomization, which makes it easier for physically proximate attackers to conduct key-extraction attacks by leveraging the ability to collect voltage data from exposed metal, a different vector than CVE-2013-4576.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Debian Gnupg
Products
Debian Linux Libgcrypt
CVE-2016-4354

libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)

ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

CVSS 3.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba
CVE-2016-4356

libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv)

The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote attackers to cause a denial of service (out-of-bounds read) by clearing the high bit of the byte after invalid utf-8 encoded data.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba
CVE-2016-4355

libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)

Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to cause a denial of service (crash) via crafted BER data, which leads to a buffer overflow.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Gnupg
Products
Ubuntu Linux Libksba
CVE-2010-2547

2: use-after-free when importing certificate with many alternate names

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled in a realloc operation when importing the certificate or verifying its signature.

CVSS 3.1 · 8.1 High EPSS 5.3% KEV · Not listed
Vendors
Debian Fedoraproject Gnupg and 1 more
Products
Debian Linux Fedora Gnupg and 1 more
CVE-2013-4576

gnupg: RSA secret key recovery via acoustic cryptanalysis

GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Gnupg Redhat
Products
Gnupg Enterprise Linux
CVE-2013-4402

GnuPG: infinite recursion in the compressed packet parser DoS

The compressed packet parser in GnuPG 1.4.x before 1.4.15 and 2.0.x before 2.0.22 allows remote attackers to cause a denial of service (infinite recursion) via a crafted OpenPGP message.

CVSS 2.0 · 5.0 Medium EPSS 5.0% KEV · Not listed
Vendors
Canonical Gnupg Redhat
Products
Ubuntu Linux Gnupg Enterprise Linux
CVE-2013-4351

gnupg: treats no-usage-permitted keys as all-usages-permitted

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.

CVSS 2.0 · 5.8 Medium EPSS 2.5% KEV · Not listed
Vendors
Gnupg Redhat
Products
Gnupg Enterprise Linux