CVE-2013-4242

GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack

GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Gnupg and 2 more

Products

Ubuntu Linux Debian Linux Gnupg and 3 more

CVE-2012-6085

GnuPG: read_block() corrupt key input validation

The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers to corrupt the public keyring database or cause a denial of service (application crash) via a crafted length field of an OpenPGP packet.

CVSS 2.0 · 5.8 Medium EPSS 2.9% KEV · Not listed

Vendors

Gnupg Redhat

Products

Gnupg Enterprise Linux

CVE-2022-3515

libksba: integer overflow may lead to remote code execution

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed

Vendors

Gnupg Gpg4win Redhat

Products

Gnupg Libksba Vs-desktop and 7 more

CVE-2022-3219

gnupg: denial of service issue (resource consumption) using compressed packets

GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compressed down to just a few KB.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnupg

Products

Gnupg

CVE-2022-34903

gpg: Signature spoofing via status line injection

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.

CVSS 3.1 · 6.5 Medium EPSS 2.8% KEV · Not listed

Vendors

Debian Fedoraproject Gnupg and 2 more

Products

Debian Linux Fedora Gnupg and 3 more

CVE-2021-3345

libgcrypt: Heap buffer overflow in the block buffer management code

_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later.

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed

Vendors

Gnupg Oracle

Products

Libgcrypt Communications Billing And Revenue Management

CVE-2020-25125

gnupg: AEAD preference list overflow

GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD preferences. The overflow is caused by a g10/key-check.c error. NOTE: GnuPG 2.3.x is unaffected. GnuPG 2.2.23 is a fixed version.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed

Vendors

Gnupg Gpg4win

Products

Gnupg Gpg4win

CVE-2019-14855

gnupg2: OpenPGP Key Certification Forgeries with SHA-1

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness to create forged certificate signatures. This issue affects GnuPG versions before 2.2.18.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Canonical Fedoraproject Gnupg

Products

Ubuntu Linux Fedora Gnupg

CVE-2019-13050

GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS

Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network may cause a persistent denial of service, because of a Certificate Spamming Attack.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed

Vendors

F5 Fedoraproject Gnupg and 3 more

Products

Traffix Signaling Delivery Controller Fedora Gnupg and 3 more

CVE-2018-9234

GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys

GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Canonical Gnupg

Products

Ubuntu Linux Gnupg

CVE-2018-6829

libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information

cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Gnupg

Products

Libgcrypt

CVE-2018-12020

gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification

mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the "--status-fd 2" option. For example, the OpenPGP data might represent an original filename that contains line feed characters in conjunction with GOODSIG or VALIDSIG status codes.

CVSS 3.1 · 7.5 High EPSS 8.2% KEV · Not listed

Vendors

Canonical Debian Gnupg and 1 more

Products

Ubuntu Linux Debian Linux Gnupg and 7 more

CVE-2018-1000858

gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service

GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window of Thunderbird/Enigmail. This vulnerability appears to have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060.

CVSS 3.0 · 8.8 High EPSS 1.0% KEV · Not listed

Vendors

Canonical Gnupg Redhat

Products

Ubuntu Linux Gnupg Enterprise Linux

CVE-2015-1607

gnupg2: memcpy with overlapping ranges (keybox_search.c)

kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allows remote attackers to cause a denial of service (invalid read operation) via a crafted keyring file, related to sign extensions and "memcpy with overlapping ranges."

CVSS 3.1 · 5.5 Medium EPSS 2.5% KEV · Not listed

Vendors

Canonical Gnupg

Products

Ubuntu Linux Gnupg

CVE-2015-1606

gnupg2: invalid memory read using a garbled keyring

The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service (invalid read and use-after-free) via a crafted keyring file.

CVSS 3.1 · 5.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Debian Gnupg

Products

Debian Linux Gnupg

CVE-2015-0837

libgcrypt: last-level cache side-channel attack

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cache Side-Channel Attack."

CVSS 3.1 · 5.9 Medium EPSS 2.0% KEV · Not listed

Vendors

Debian Gnupg

Products

Debian Linux Gnupg Libgcrypt

CVE-2014-3591

libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)

Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's private key by determining factors using crafted ciphertext and the fluctuations in the electromagnetic field during multiplication.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Gnupg

Products

Debian Linux Gnupg Libgcrypt

CVE-2011-2207

dirmngr: Improper dealing with blocking system calls, when verifying a certificate

dirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to cause a denial of service (DOS) via a specially-crafted certificate.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed

Vendors

Debian Gnupg Redhat

Products

Debian Linux Gnupg Enterprise Linux