PT-2013-1173 · Gnu+3 · Gnupg+3
Ratul Gupta
·
Published
2013-10-09
·
Updated
2024-06-15
·
CVE-2013-4351
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
GnuPG versions 1.4.x through 2.1.x
Description
The issue allows remote attackers to bypass intended cryptographic protection mechanisms by leveraging a subkey with all bits cleared in a key flags subpacket, which is treated as if all bits are set. This might lead to a violation of the integrity and availability of protected information. The exploitation of this issue can be done remotely.
Recommendations
For GnuPG versions 1.4.x through 2.1.x, update to a version that fixes this issue to prevent exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Gnupg
Red Hat
Suse