GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 01:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.opensuse.org/opensuse-updates/2013-10/msg00003.html - | |
| References | () http://lists.opensuse.org/opensuse-updates/2013-10/msg00006.html - | |
| References | () http://rhn.redhat.com/errata/RHSA-2013-1459.html - | |
| References | () http://thread.gmane.org/gmane.comp.encryption.gpg.devel/17712/focus=18138 - | |
| References | () http://ubuntu.com/usn/usn-1987-1 - | |
| References | () http://www.debian.org/security/2013/dsa-2773 - | |
| References | () http://www.debian.org/security/2013/dsa-2774 - | |
| References | () http://www.openwall.com/lists/oss-security/2013/09/13/4 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1010137 - |
Information
Published : 2013-10-10 00:55
Updated : 2024-11-21 01:55
NVD link : CVE-2013-4351
Mitre link : CVE-2013-4351
CVE.ORG link : CVE-2013-4351
JSON object : View
Products Affected
gnupg
- gnupg
CWE
CWE-310
Cryptographic Issues