CVE-2013-4351: GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote… | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Oct 10, 2013

CVE-2013-4351

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote…

–

CVSS

2.5%

EPSS

No

On KEV

Description

GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.5% · higher than 85% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

GN

1.4.0; 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.6; +24 more · source: NVD

Affected product

GN

Gnupg

Gnupg

References

https://nvd.nist.gov/vuln/detail/CVE-2013-4351

https://www.cve.org/CVERecord?id=CVE-2013-4351

lists.opensuse.org

http://lists.opensuse.org/opensuse-updates/2013-10/msg00003.html

lists.opensuse.org

http://lists.opensuse.org/opensuse-updates/2013-10/msg00006.html

http://rhn.redhat.com/errata/RHSA-2013-1459.html

thread.gmane.org

http://thread.gmane.org/gmane.comp.encryption.gpg.devel/17712/focus=18138

http://ubuntu.com/usn/usn-1987-1

http://www.debian.org/security/2013/dsa-2773

More from Gnupg

9.8

In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during…

9.8

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser

8.8

CVE-2018-1000858

GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS

8.1

Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary…

7.8

In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys